developing-with-streamlit
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFENO_CODECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill package consists entirely of Markdown documentation and educational content. It does not include any executable scripts, binaries, or source code files that run within the agent's environment.- [COMMAND_EXECUTION]: The documentation provides instructions for standard development operations using the Streamlit CLI and package managers like uv and npm. These instructions are purely educational and target official Streamlit functionality.- [EXTERNAL_DOWNLOADS]: The skill references official Streamlit templates (e.g., from the streamlit GitHub organization) and well-known community components. It includes guidance on evaluating third-party components for maintenance and safety before installation.- [PROMPT_INJECTION]: The skill includes security-focused sections that teach developers how to prevent SQL injection by using parameterized queries and avoiding unsafe string formatting in database connections.- [SAFE]: Includes a dedicated guide for Snowflake integration that promotes secure secrets management using st.secrets and provides clear instructions on avoiding the hardcoding of credentials.
Audit Metadata