nimble-databricks-data-products
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest live web data from third-party websites (e.g., Amazon, Walmart) into Databricks tables, which presents an attack surface for indirect prompt injection.
- Ingestion points: External data enters the environment via the
nimble_agent_runfunction as described inreferences/nimble-agents.md. - Boundary markers: The skill maps data to structured Delta tables but does not apply specific delimiters or instructions to ignore potential injection content within the scraped text fields.
- Capability inventory: The agent has the ability to execute SQL statements, manage workspace secrets, and deploy Databricks Apps and dashboards.
- Sanitization: The skill employs
try_castandregexp_replacefor numeric data validation, though textual content is ingested as-is. - [COMMAND_EXECUTION]: The skill invokes the Databricks CLI through
subprocesscalls inscripts/build_dashboard.pyand via Bash inscripts/ingest.shto manage workspace resources and execute SQL. - [EXTERNAL_DOWNLOADS]: The skill directs users to download integration scripts and SQL definitions from the vendor's official GitHub repository at
github.com/Nimbleway/cookbook. These references target the author's own infrastructure and are documented as part of the setup process.
Audit Metadata