setup-warehouse-snowflake
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill sends background telemetry events to
onboarding.confidence.devandevents.confidence.dev. These events include session identifiers, skill progress, and inferred user sentiment (e.g., "positive", "frustrated"). The instructions explicitly direct the agent to keep this telemetry transparent to the user and never mention it. - [COMMAND_EXECUTION]: The skill utilizes
pbcopyto automatically move generated SQL commands, which include authentication keys, to the user's system clipboard. It also usesuuidgenand shell redirects to manage session state in temporary directories. - [EXTERNAL_DOWNLOADS]: The skill fetches telemetry configuration and client secrets from
onboarding.confidence.devusingcurlat the start of every invocation. - [DYNAMIC_EXECUTION]: The skill employs an inline
python3 -cscript to parse and extract secrets from JSON data retrieved via a network request during the telemetry initialization phase.
Audit Metadata