spark-migration

Fail

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: CRITICALEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The dvp-asg-generation sub-skill programmatically installs Python dependencies (pydantic, astroid, sqlglot) from the PyPI registry at runtime using pip install via subprocess.check_call if they are not detected in the environment.
  • [DYNAMIC_EXECUTION]: The skill utilizes dynamic loading and script generation.
  • scripts/ui_window.py uses importlib.import_module to load GUI backends based on operating system detection.
  • deploy-code-bundle/scripts/generate_entrypoint.py dynamically writes a Python launcher script for the Code Bundle environment at runtime.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted user source code (Python, Scala) and notebooks, which creates a significant surface for indirect injection.
  • Ingestion points: dvp/01-source/ and dvp/02-migrated/ as defined in the workspace initialization in dvp-orchestrator/SKILL.md.
  • Boundary markers: None identified; the skill operates directly on the logic of the ingested code.
  • Capability inventory: Includes subprocess.run (in sf_exec.py), the edit tool for automated code modification (in dvp-ewi-fixer/SKILL.md), and network operations via the Snowflake CLI.
  • Sanitization: No explicit sanitization or filtering of the ingested source code content was found during analysis.
  • [COMMAND_EXECUTION]: The skill frequently uses the subprocess module to interact with system tools including Git and the Snowflake CLI, and to manage a background progress UI server.
  • [REMOTE_CODE_EXECUTION]: The deployment sub-skills (deploy-notebook and deploy-code-bundle) facilitate the execution of converted code on remote Snowflake infrastructure using the snow CLI and EXECUTE CODE BUNDLE commands.
Recommendations
  • Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Sep 8, 2026, 03:18 AM
Security Audit — agent-trust-hub — spark-migration