digdag
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the standard platform requirement for installing Python dependencies at runtime using
pipfrom arequirements.txtfile within thepy>operator's ephemeral Docker environment. - [COMMAND_EXECUTION]: The skill utilizes the
py>operator to execute Python scripts. This is a core feature of the Digdag workflow engine on Treasure Data, used for complex logic, API integrations, and data transformations that exceed SQL capabilities. - [DYNAMIC_EXECUTION]: The skill includes documentation for a pattern to install Python requirements at runtime using
os.systemto call the Python executable's pip module. This is the established method for managing dependencies in the Treasure Data Custom Script environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes workflow parameters and external data sources (e.g., API results) that are interpolated into tasks. The documentation notes that while parameters are stringified for template interpolation, they represent a surface for handling external data within the workflow context.
Audit Metadata