dagster-per-asset-healthchecks

Fail

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: HIGHCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [CREDENTIALS_UNSAFE]: The documentation includes a hardcoded API key string: hcw_Xxfgcx40LFjb2JJlDJvDainCDIXg.
  • [COMMAND_EXECUTION]: The skill provides instructions to create a shell script and execute it with root privileges via sudo on a remote host: ssh nuc "sudo bash /tmp/push.sh".
  • [COMMAND_EXECUTION]: The skill references a specific path to a private SSH key (/home/emiller/.ssh/id_ed25519) for Git operations.
  • [EXTERNAL_DOWNLOADS]: The skill uses curl and the Python requests library to communicate with the external service healthchecks.io and a local GraphQL endpoint.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Mar 12, 2026, 07:06 PM