authoring-dags
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The documentation in
reference/best-practices.mdcontains an example connection string with placeholders. This is a false positive for a credential leak, as it is explicitly marked as a 'WRONG' pattern in a tutorial designed to teach developers how to avoid hardcoding secrets. - [COMMAND_EXECUTION]: The skill instructions include several calls to the
afCLI for environment discovery (e.g.,af config connections,af dags list) and validation (e.g.,af dags errors). These are standard administrative actions for the intended Airflow developer persona. Additionally, aStophook executes a benignechocommand to remind the user about testing procedures. - [EXTERNAL_DOWNLOADS]: The skill mentions the installation of
astro-airflow-mcpviauv. This tool is a resource provided by the skill author (Astronomer) for Airflow development and does not represent an unauthorized or suspicious external dependency.
Audit Metadata