fetching-dbt-docs

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The scripts/search-dbt-docs.sh script downloads a plain-text documentation index from https://docs.getdbt.com/llms-full.txt via curl to enable local keyword filtering. This download targets the official documentation domain of the vendor and does not execute remote code.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted text content from external documentation web pages. To mitigate indirect prompt injection risks, the skill implements explicit guardrails in SKILL.md under 'Handling External Content', instructing the agent to ignore any embedded instructions and treat the content strictly as informational text.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 07:36 PM
Security Audit — agent-trust-hub — fetching-dbt-docs