apache-airflow-orchestration
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The README.md file includes a command to download an official Docker Compose configuration from the Apache Airflow documentation site (airflow.apache.org). This is a trusted source for the software described in the skill.
- [COMMAND_EXECUTION]: The skill provides examples of using the BashOperator to execute shell commands and the PythonOperator for executing Python code. These are core features of Apache Airflow and are used here for legitimate educational purposes, such as printing dates or running processing scripts.
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: Python-based extraction tasks from S3 and APIs (SKILL.md, EXAMPLES.md). 2. Boundary markers: Best practices section recommends Secrets Management and RBAC to prevent unauthorized access. 3. Capability inventory: BashOperator (subprocess execution), PythonOperator (dynamic Python execution), and KubernetesPodOperator. 4. Sanitization: The skill provides general security hardening recommendations in the best practices section to mitigate risks associated with processing external data.
Audit Metadata