write-script-bigquery

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for the agent to use the wmill CLI for managing script lifecycles. This includes commands for previewing local files (wmill script preview), running deployed versions (wmill script run), and pushing changes to the workspace (wmill sync push).
  • [REMOTE_CODE_EXECUTION]: The skill enables the agent to execute code by using the wmill script preview command. This is a standard development capability that allows for testing script logic and parameters locally before deployment.
  • [DATA_EXFILTRATION]: The skill documents the use of the -- s3 directive in SQL scripts to stream query results to Amazon S3. This is an intended platform feature for handling large datasets by writing them to external storage instead of returning them in the response body.
  • [EXTERNAL_DOWNLOADS]: The wmill generate-metadata command is described as a utility that re-resolves dependencies and updates lock files. This process involves interacting with external package registries to ensure script dependencies are correctly synchronized.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 06:29 AM
Security Audit — agent-trust-hub — write-script-bigquery