motherduck-build-data-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The orchestration script
references/dlt-dbt-motherduck-project/pipeline/run_all.pyutilizessubprocess.runto execute thedbtbuild process and a local validation script. This is a standard and expected pattern for orchestrating data transformation workflows within a defined project structure. - [EXTERNAL_DOWNLOADS]: The skill requires standard, well-known data engineering libraries including
dbt-duckdb,dlt, andduckdbas specified in thepyproject.tomlfile. These are sourced from standard public registries and are typical for this domain. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data formats such as Parquet, CSV, and JSONL. It addresses the inherent risks of processing untrusted data by promoting a rigorous multi-stage architecture (Raw, Staging, Analytics) that isolates ingestion from transformation and incorporates explicit data quality validations at each boundary.
Audit Metadata