dlt-skill
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard developer workflows for data engineering. It provides templates for various pipeline approaches (verified sources, declarative REST, and custom Python) and includes reference documentation for performance tuning and troubleshooting.
- [COMMAND_EXECUTION]: The helper scripts
scripts/install_packages.pyandscripts/open_dashboard.pyutilize Python'ssubprocess.runto automate interactions with dependency managers (uv, pip, poetry) and thedltCLI. These implementations correctly use list-based arguments and avoidshell=True, preventing command injection vulnerabilities. - [CREDENTIALS_SAFE]: The skill explicitly instructs users to store sensitive credentials in
.dlt/secrets.tomland provides a.gitignoretemplate to prevent these secrets from being committed to version control. This aligns with security best practices for secret management.
Audit Metadata