dagster-per-asset-healthchecks
Fail
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: HIGHCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The documentation includes a hardcoded API key string:
hcw_Xxfgcx40LFjb2JJlDJvDainCDIXg. - [COMMAND_EXECUTION]: The skill provides instructions to create a shell script and execute it with root privileges via sudo on a remote host:
ssh nuc "sudo bash /tmp/push.sh". - [COMMAND_EXECUTION]: The skill references a specific path to a private SSH key (
/home/emiller/.ssh/id_ed25519) for Git operations. - [EXTERNAL_DOWNLOADS]: The skill uses
curland the Pythonrequestslibrary to communicate with the external servicehealthchecks.ioand a local GraphQL endpoint.
Recommendations
- AI detected serious security threats
Audit Metadata