The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the user to clone a repository from github.com/analyticsdurgesh/Snowflake_DBT_Project, which is an untrusted external source.
[REMOTE_CODE_EXECUTION]: The skill executes scripts from the cloned repository, such as scripts/load_inside_airbnb_to_snowflake.py and dashboard/streamlit_app.py.
[INDIRECT_PROMPT_INJECTION]: The skill ingests raw CSV data from Inside Airbnb into Snowflake for transformation and visualization. If these external datasets contain malicious instructions, they could potentially influence the agent's data processing or analysis logic.
Ingestion points: data/raw/ directory files loaded via scripts/load_inside_airbnb_to_snowflake.py.
Boundary markers: Absent.
Capability inventory: snowflake.connector for database operations, dbt for SQL execution, and streamlit for web visualization.
Sanitization: Explicit type casting in dbt models (e.g., id::bigint, price::decimal) provides basic data type validation but does not prevent logic-based injection.
[DYNAMIC_EXECUTION]: The skill uses snowflake.connector to execute dynamic SQL commands and uses f-strings to construct file paths for staging data, which could lead to command injection if the file paths were user-controlled.
[COMMAND_EXECUTION]: The skill executes various dbt and streamlit commands via the shell to manage the data pipeline and dashboard application.

snowflake-dbt-airbnb-analytics