nimble-databricks-data-products

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest live web data from third-party websites (e.g., Amazon, Walmart) into Databricks tables, which presents an attack surface for indirect prompt injection.
  • Ingestion points: External data enters the environment via the nimble_agent_run function as described in references/nimble-agents.md.
  • Boundary markers: The skill maps data to structured Delta tables but does not apply specific delimiters or instructions to ignore potential injection content within the scraped text fields.
  • Capability inventory: The agent has the ability to execute SQL statements, manage workspace secrets, and deploy Databricks Apps and dashboards.
  • Sanitization: The skill employs try_cast and regexp_replace for numeric data validation, though textual content is ingested as-is.
  • [COMMAND_EXECUTION]: The skill invokes the Databricks CLI through subprocess calls in scripts/build_dashboard.py and via Bash in scripts/ingest.sh to manage workspace resources and execute SQL.
  • [EXTERNAL_DOWNLOADS]: The skill directs users to download integration scripts and SQL definitions from the vendor's official GitHub repository at github.com/Nimbleway/cookbook. These references target the author's own infrastructure and are documented as part of the setup process.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 03:30 AM