motherduck-connect

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill correctly identifies and instructs on the use of standard database connectivity patterns for MotherDuck.
  • [DATA_EXFILTRATION]: The instructions and code examples prioritize security by advising against hardcoding access tokens. Examples utilize environment variables (os.environ and process.env) and secret management best practices.
  • [EXTERNAL_DOWNLOADS]: The skill references standard, reputable libraries for database interaction, including psycopg2, duckdb, sqlalchemy, and pg, which are sourced from official package registries.
  • [COMMAND_EXECUTION]: Code snippets provide implementation examples for database queries and connections. No suspicious or arbitrary shell command execution patterns were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 07:00 AM