data-engineering

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The anomaly detection example in SKILL.md demonstrates a SQL injection vulnerability by using f-string interpolation to insert the table variable directly into a SQL query: pd.read_sql(f"select ... from {table} ...", conn). This allows for arbitrary SQL execution if the table name is sourced from unsanitized user input.
  • [EXTERNAL_DOWNLOADS]: The skill references several industry-standard Python libraries including dagster, dagster-dbt, pandas, boto3, stripe, and great-expectations. While these involve external dependencies, they are well-known libraries and their usage in the skill follows documented functional patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 10:29 AM
Security Audit — agent-trust-hub — data-engineering