monte-carlo-push-ingestion
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill provides robust security controls within its templates, such as path resolution logic in
_safe_paths.pythat prevents path traversal by restricting file operations to the current working directory. It also includesvalidate_redshift_hostlogic to mitigate SSRF risks by enforcing AWS-specific hostname patterns and blocking private IP ranges unless explicitly allowed. - [EXTERNAL_DOWNLOADS]: The skill references and requires the installation of standard, official libraries for database connectivity and the Monte Carlo SDK (
pycarlo). It points to official documentation and public resource repositories on GitHub maintained by Monte Carlo Data. - [COMMAND_EXECUTION]: The skill generates ready-to-run CLI Python scripts. These scripts perform the intended functions of querying system catalogs and pushing data to an observability platform, following standard development patterns for such tasks.
- [DATA_EXFILTRATION]: The skill facilitates the transfer of warehouse metadata and query history to Monte Carlo's ingestion gateway. This is the explicitly stated and intended core purpose of the skill, and it is implemented using official APIs with secure credential management via environment variables.
Audit Metadata