data-warehousing
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/validate.pycorrectly implementsyaml.safe_load()for parsing theassets/config.yamlfile, which is a security best practice to prevent arbitrary code execution during deserialization. - [SAFE]: The SQL snippets and documentation provided in
SKILL.mdand thereferences/directory focus on legitimate data engineering practices, such as dimensional modeling and Snowflake optimization, without attempting to access sensitive system files or credentials. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided task descriptions as documented in
references/GUIDE.md. - Ingestion points: User prompt input used to describe warehousing tasks.
- Boundary markers: None present in the instructions.
- Capability inventory: The skill primarily provides information and templates; it does not include tools or scripts with system-level write access or network capabilities that could be exploited.
- Sanitization: Relies on standard LLM safety guardrails.
Audit Metadata