orchestration-and-backfills
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate utility for data engineers, focusing on best practices for pipeline orchestration, retries, and historical data reprocessing.
- [EXTERNAL_DOWNLOADS]: The Python scripts in the
checks/directory rely on thePyYAMLlibrary. This is a standard and reputable third-party dependency for configuration parsing. - [DYNAMIC_EXECUTION]: Technical review of
checks/blast_radius.pyandchecks/cost_estimate.pyshows thatyaml.safe_load()is used for deserialization. This correctly mitigates risks associated with arbitrary object instantiation during data loading. - [DATA_EXPOSURE]: The analysis confirms that the scripts do not access sensitive system paths (like
.sshor.aws), environment secrets, or perform unauthorized network communication. They only process the specific configuration files provided via CLI arguments. - [PROMPT_INJECTION]: The core skill instructions (
SKILL.md) use standard instructional language for task guidance and do not contain any bypass patterns, role-play injections, or attempts to extract system prompts.
Audit Metadata