write-script-bigquery
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use the
wmillCLI for managing script lifecycles. This includes commands for previewing local files (wmill script preview), running deployed versions (wmill script run), and pushing changes to the workspace (wmill sync push). - [REMOTE_CODE_EXECUTION]: The skill enables the agent to execute code by using the
wmill script previewcommand. This is a standard development capability that allows for testing script logic and parameters locally before deployment. - [DATA_EXFILTRATION]: The skill documents the use of the
-- s3directive in SQL scripts to stream query results to Amazon S3. This is an intended platform feature for handling large datasets by writing them to external storage instead of returning them in the response body. - [EXTERNAL_DOWNLOADS]: The
wmill generate-metadatacommand is described as a utility that re-resolves dependencies and updates lock files. This process involves interacting with external package registries to ensure script dependencies are correctly synchronized.
Audit Metadata