authoring-dags

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The documentation in reference/best-practices.md contains an example connection string with placeholders. This is a false positive for a credential leak, as it is explicitly marked as a 'WRONG' pattern in a tutorial designed to teach developers how to avoid hardcoding secrets.
  • [COMMAND_EXECUTION]: The skill instructions include several calls to the af CLI for environment discovery (e.g., af config connections, af dags list) and validation (e.g., af dags errors). These are standard administrative actions for the intended Airflow developer persona. Additionally, a Stop hook executes a benign echo command to remind the user about testing procedures.
  • [EXTERNAL_DOWNLOADS]: The skill mentions the installation of astro-airflow-mcp via uv. This tool is a resource provided by the skill author (Astronomer) for Airflow development and does not represent an unauthorized or suspicious external dependency.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 07:00 AM
Security Audit — agent-trust-hub — authoring-dags