dlt-skill

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements standard developer workflows for data engineering. It provides templates for various pipeline approaches (verified sources, declarative REST, and custom Python) and includes reference documentation for performance tuning and troubleshooting.
  • [COMMAND_EXECUTION]: The helper scripts scripts/install_packages.py and scripts/open_dashboard.py utilize Python's subprocess.run to automate interactions with dependency managers (uv, pip, poetry) and the dlt CLI. These implementations correctly use list-based arguments and avoid shell=True, preventing command injection vulnerabilities.
  • [CREDENTIALS_SAFE]: The skill explicitly instructs users to store sensitive credentials in .dlt/secrets.toml and provides a .gitignore template to prevent these secrets from being committed to version control. This aligns with security best practices for secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 07:22 PM