spark-migration
Fail
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
dvp-asg-generationsub-skill programmatically installs Python dependencies (pydantic,astroid,sqlglot) from the PyPI registry at runtime usingpip installviasubprocess.check_callif they are not detected in the environment. - [DYNAMIC_EXECUTION]: The skill utilizes dynamic loading and script generation.
scripts/ui_window.pyusesimportlib.import_moduleto load GUI backends based on operating system detection.deploy-code-bundle/scripts/generate_entrypoint.pydynamically writes a Python launcher script for the Code Bundle environment at runtime.- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted user source code (Python, Scala) and notebooks, which creates a significant surface for indirect injection.
- Ingestion points:
dvp/01-source/anddvp/02-migrated/as defined in the workspace initialization indvp-orchestrator/SKILL.md. - Boundary markers: None identified; the skill operates directly on the logic of the ingested code.
- Capability inventory: Includes
subprocess.run(insf_exec.py), theedittool for automated code modification (indvp-ewi-fixer/SKILL.md), and network operations via the Snowflake CLI. - Sanitization: No explicit sanitization or filtering of the ingested source code content was found during analysis.
- [COMMAND_EXECUTION]: The skill frequently uses the
subprocessmodule to interact with system tools including Git and the Snowflake CLI, and to manage a background progress UI server. - [REMOTE_CODE_EXECUTION]: The deployment sub-skills (
deploy-notebookanddeploy-code-bundle) facilitate the execution of converted code on remote Snowflake infrastructure using thesnowCLI andEXECUTE CODE BUNDLEcommands.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata