01-yaml-table-setup
Audited by Socket on Mar 8, 2026
1 alert found:
Obfuscated FileThe YAML-driven Gold table setup skill presents a coherent footprint for its stated purpose: replacing embedded DDL with YAML-driven schema definitions and a single generic setup script. The data flow is localized to YAML ingestion, DDL generation, and catalog updates, with FK constraints handled separately. While there are minor anomalies (duplicate Delta properties, strict two-path YAML discovery, and validation gaps), none rise to the level of deliberate credential harvesting or external exfiltration. Overall risk is moderate due to live-database-impacting actions and reliance on YAML integrity, but the footprint aligns with its stated purpose when operating within trusted internal environments. Recommend adding explicit YAML schema validation, clearer error handling for missing PKs, and stronger path/default handling to reduce operational risk.