motherduck-cli
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides installation commands for the MotherDuck CLI targeting
install.motherduck.com. These are official installation methods for the vendor's own tooling and are documented neutrally for setup purposes. - [COMMAND_EXECUTION]: The skill uses various
motherduckCLI commands (e.g.,status,query,login,dive,flight) to interact with the service. These are the primary purpose of the skill and include guidance on using--output jsonfor machine readability andset -euo pipefailfor script safety. - [CREDENTIALS_SAFE]: The playbook explicitly warns against echoing tokens, writing them into project files, or committing state directories. It correctly recommends using
MOTHERDUCK_TOKENenvironment variables and isolatedMOTHERDUCK_HOMEdirectories to prevent credential leakage between parallel tasks.
Audit Metadata