write-script-duckdb
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
wmillCLI tool to perform various development tasks such as previewing scripts, running deployed code, and synchronizing metadata. These are standard operations for the Windmill platform. - [DATA_EXFILTRATION]: The skill provides templates for connecting DuckDB to external resources such as S3 buckets and remote databases using the
ATTACHcommand. These are legitimate data processing features provided by DuckDB and the Windmill resource management system. - [PROMPT_INJECTION]: The skill contains logic to help the agent correctly interpret user intent for different CLI commands (e.g., distinguishing between a request to 'test' versus 'deploy'), which helps prevent unintended state changes in the workspace.
Audit Metadata