create-custom-dagster-component
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes 'dg' CLI commands through 'uv' to perform scaffolding and validation of Dagster components. This operation is limited to the local development environment as intended for this developer tool.\n- [EXTERNAL_DOWNLOADS]: The skill references documentation and examples from official Dagster domains and GitHub repositories. These are well-known and trusted sources for the technology stack involved.\n- [PROMPT_INJECTION]: The skill identifies and manages a potential injection surface where user-provided component names are passed to shell commands. Mitigation is provided through mandatory validation instructions in Step 1 (Ingestion: ComponentName in Step 1; Boundary: validation instructions; Capability: shell execution in Steps 2, 4, and 6; Sanitization: alphanumeric check).\n- [REMOTE_CODE_EXECUTION]: A local Python script is used to verify CLI output. This script is static, hardcoded within the skill, and does not execute untrusted external data or network-sourced code.
Audit Metadata