data-engineering
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The anomaly detection example in
SKILL.mddemonstrates a SQL injection vulnerability by using f-string interpolation to insert thetablevariable directly into a SQL query:pd.read_sql(f"select ... from {table} ...", conn). This allows for arbitrary SQL execution if the table name is sourced from unsanitized user input. - [EXTERNAL_DOWNLOADS]: The skill references several industry-standard Python libraries including
dagster,dagster-dbt,pandas,boto3,stripe, andgreat-expectations. While these involve external dependencies, they are well-known libraries and their usage in the skill follows documented functional patterns.
Audit Metadata