motherduck-cli

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides installation commands for the MotherDuck CLI targeting install.motherduck.com. These are official installation methods for the vendor's own tooling and are documented neutrally for setup purposes.
  • [COMMAND_EXECUTION]: The skill uses various motherduck CLI commands (e.g., status, query, login, dive, flight) to interact with the service. These are the primary purpose of the skill and include guidance on using --output json for machine readability and set -euo pipefail for script safety.
  • [CREDENTIALS_SAFE]: The playbook explicitly warns against echoing tokens, writing them into project files, or committing state directories. It correctly recommends using MOTHERDUCK_TOKEN environment variables and isolated MOTHERDUCK_HOME directories to prevent credential leakage between parallel tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 08:24 PM
Security Audit — agent-trust-hub — motherduck-cli