dlt-bootstrap
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various
uvanddlthubcommands to initialize the project environment, add dependencies, and install specific AI toolkits. - Evidence includes shell commands in
SKILL.md:uv add "dlt[hub]",uv run dlthub init, anduv run dlthub ai toolkit install. - It also performs local environment inspection using
uv run dlthub --versionand git state checks. - [EXTERNAL_DOWNLOADS]: The skill references and fetches documentation from official dltHub sources and GitHub repositories to ensure up-to-date configuration.
- Targets include official domains like
dlthub.comandraw.githubusercontent.com/dlt-hub/. - [DATA_EXFILTRATION]: The skill incorporates strong guardrails against accidental data exposure.
- It explicitly instructs the agent to verify that
.dlt/secrets.tomlis added to.gitignoreand never to ask for credentials in chat, directing users to local secret management tools instead.
Audit Metadata