skills/treasure-data/td-skills/digdag/Gen Agent Trust Hub

digdag

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documents the standard platform requirement for installing Python dependencies at runtime using pip from a requirements.txt file within the py> operator's ephemeral Docker environment.
  • [COMMAND_EXECUTION]: The skill utilizes the py> operator to execute Python scripts. This is a core feature of the Digdag workflow engine on Treasure Data, used for complex logic, API integrations, and data transformations that exceed SQL capabilities.
  • [DYNAMIC_EXECUTION]: The skill includes documentation for a pattern to install Python requirements at runtime using os.system to call the Python executable's pip module. This is the established method for managing dependencies in the Treasure Data Custom Script environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes workflow parameters and external data sources (e.g., API results) that are interpolated into tasks. The documentation notes that while parameters are stringified for template interpolation, they represent a surface for handling external data within the workflow context.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 07:21 AM
Security Audit — agent-trust-hub — digdag