monte-carlo-push-ingestion

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [SAFE]: The skill provides robust security controls within its templates, such as path resolution logic in _safe_paths.py that prevents path traversal by restricting file operations to the current working directory. It also includes validate_redshift_host logic to mitigate SSRF risks by enforcing AWS-specific hostname patterns and blocking private IP ranges unless explicitly allowed.
  • [EXTERNAL_DOWNLOADS]: The skill references and requires the installation of standard, official libraries for database connectivity and the Monte Carlo SDK (pycarlo). It points to official documentation and public resource repositories on GitHub maintained by Monte Carlo Data.
  • [COMMAND_EXECUTION]: The skill generates ready-to-run CLI Python scripts. These scripts perform the intended functions of querying system catalogs and pushing data to an observability platform, following standard development patterns for such tasks.
  • [DATA_EXFILTRATION]: The skill facilitates the transfer of warehouse metadata and query history to Monte Carlo's ingestion gateway. This is the explicitly stated and intended core purpose of the skill, and it is implemented using official APIs with secure credential management via environment variables.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 10:59 AM
Security Audit — agent-trust-hub — monte-carlo-push-ingestion