metabase-semantic-checker
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill pulls the official
metabase/metabase-enterpriseDocker image from Docker Hub. This is a trusted resource provided by the vendor 'metabase'. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to executedocker pullanddocker runcommands. These are necessary to invoke the semantic checker and are restricted to the local workspace mount. - [INDIRECT_PROMPT_INJECTION]: The skill processes project YAML files and a metadata JSON file. While these are untrusted inputs, they are analyzed by a specialized Metabase binary rather than directly influencing agent logic in a dangerous way.
- Ingestion points: Repository YAML files and
.metadata/table_metadata.json. - Boundary markers: None explicitly defined, but the data is passed to a structured validator.
- Capability inventory:
Bash,Read,Glob,Grepare used to locate and process files. - Sanitization: Relies on the
java -jar metabase.jar --mode checkercommand to validate the integrity of the data.
Audit Metadata