databricks-to-zenml-migration
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process untrusted user data, specifically Databricks job JSON and notebook source files. Ingestion points: Phase 1 in SKILL.md identifies the primary input as user-provided Databricks job definitions and notebook code. Boundary markers: The instructions do not specify the use of delimiters or 'ignore instructions' warnings when the agent processes these external data sources. Capability inventory: The skill generates Python project structures and suggests the execution of CLI tools like zenml and gh for infrastructure setup and reporting. Sanitization: There is no explicit mention of structure validation or sanitization of the input code before it is interpreted for migration.
- [EXTERNAL_DOWNLOADS]: The skill suggests the installation of an MCP server hosted on the author's official documentation domain. Evidence: SKILL.md Phase 5 recommends adding a server from docs.zenml.io.
- [COMMAND_EXECUTION]: The skill utilizes standard developer CLI tools to manage the migration lifecycle. Evidence: Instructions include commands for zenml init, zenml secret create, and gh issue create to facilitate project setup and support.
Audit Metadata