databricks-apps

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides thorough documentation for building apps on the Databricks platform, following industry-standard security patterns.
  • [SAFE]: Secret management is handled via environment variables (.env, app.yaml) and Databricks secret scopes, avoiding hardcoded credentials.
  • [SAFE]: Data access is secured through parameterized SQL queries (:param syntax) and typed helpers (sql.string, sql.number), which effectively mitigate injection risks.
  • [SAFE]: The skill implements a secure authentication model, supporting both Service Principal and On-Behalf-Of (OBO) tokens for user-scoped access control.
  • [SAFE]: Input validation is consistently recommended using the zod library across server-side logic and database operations.
  • [SAFE]: External downloads and dependencies are restricted to the official vendor ecosystem (npm @databricks/* packages, Databricks CLI) and well-known open-source libraries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:50 AM
Security Audit — agent-trust-hub — databricks-apps