skd-compile
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local PowerShell or Python scripts (
skd-compile.ps1orskd-compile.py) to process the JSON-based Data Composition Schema definition. This is the core functionality required to perform the compilation. - [DATA_EXPOSURE]: The compiler supports an
@filedirective within the query definitions, which enables reading the contents of external SQL files. While this provides a mechanism to read local files, it is a documented feature for modularizing report queries and is constrained to the user's file system permissions. - [SAFE]: The skill does not perform any network operations, does not contain hardcoded credentials, and uses standard libraries for JSON processing and XML generation. The behaviors observed are consistent with the primary purpose of a developer-oriented compilation tool.
Audit Metadata