write-script-python3

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and instructions for using the wmill CLI and Python SDK within the Windmill platform environment. The documented operations (script execution, resource management, S3 operations) are standard platform functionalities intended for developers.\n- [COMMAND_EXECUTION]: The skill documents the use of wmill CLI commands such as wmill script preview, wmill sync push, and wmill generate-metadata. These are standard tools for the platform's workflow and do not involve arbitrary or malicious command injection.\n- [DATA_EXPOSURE]: The skill describes how to handle credentials using TypedDict for Windmill resources (e.g., PostgreSQL connections). This follows the platform's best practices for secret management by retrieving them from a secure resource store rather than hardcoding them.\n- [EXTERNAL_DOWNLOADS]: The skill mentions that libraries are installed automatically by the platform environment. It does not provide commands to download from untrusted third-party sources or execute remote scripts via piped shell commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 04:43 AM
Security Audit — agent-trust-hub — write-script-python3