monte-carlo-validation-notebook
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages standard command-line tools including
gh(GitHub CLI) to fetch pull request metadata and diffs,gitto analyze local repository changes, andpython3to execute internal helper scripts for schema resolution and notebook generation.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install thepyyamlPython library using pip, which is a standard dependency for parsing dbt configuration files.\n- [DYNAMIC_EXECUTION]: Upon generating the validation notebook URL, thegenerate_notebook_url.pyscript automatically invokes the system'sopencommand to launch the URL in the default web browser.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external data from GitHub PRs and local SQL models, establishing a surface for potential indirect prompt injection attacks.\n - Ingestion points: Pull request titles, file paths, diff contents, and SQL model code retrieved via
gh apior localgitcommands.\n - Boundary markers: None. The agent processes the file content directly without specific markers to ignore embedded instructions within the SQL data.\n
- Capability inventory: Network access through
gh, file read/write operations for script execution, and automated browser interaction through theopencommand.\n - Sanitization: The included
resolve_dbt_schema.pyscript implements asafe_user_pathcheck to prevent directory traversal attacks, andgenerate_notebook_url.pyperforms character sanitization and YAML schema validation before encoding data.
Audit Metadata