dagster-init
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches and executes the uv installation script from Astral's official domain (astral.sh). This is the standard installation method for a well-known and widely used developer tool.\n- [EXTERNAL_DOWNLOADS]: Uses uvx to download and execute the latest version of the create-dagster utility from official package registries to scaffold the project structure.\n- [COMMAND_EXECUTION]: The skill executes shell commands to manage project initialization, dependency synchronization (uv sync), and environment verification (dg check defs). The provided Python script implements strict regex validation (^[a-zA-Z][a-zA-Z0-9_-]*$) on user-provided project names to prevent command injection and ensure path safety.
Audit Metadata