databricks-apps
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides thorough documentation for building apps on the Databricks platform, following industry-standard security patterns.
- [SAFE]: Secret management is handled via environment variables (
.env,app.yaml) and Databricks secret scopes, avoiding hardcoded credentials. - [SAFE]: Data access is secured through parameterized SQL queries (
:paramsyntax) and typed helpers (sql.string,sql.number), which effectively mitigate injection risks. - [SAFE]: The skill implements a secure authentication model, supporting both Service Principal and On-Behalf-Of (OBO) tokens for user-scoped access control.
- [SAFE]: Input validation is consistently recommended using the
zodlibrary across server-side logic and database operations. - [SAFE]: External downloads and dependencies are restricted to the official vendor ecosystem (npm
@databricks/*packages, Databricks CLI) and well-known open-source libraries.
Audit Metadata