build-component
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for setting up development environments using official vendor resources.\n
- Downloads the Keboola CLI via an installation script from
https://cli.keboola.com/install.sh.\n - Fetches project templates using
cookiecutterfrom thekeboola/cookiecutter-python-componentGitHub repository.\n- [REMOTE_CODE_EXECUTION]: Development and deployment workflows include the execution of scripts from trusted sources.\n - Utilizes a shell pipe (
curl | bash) for the official CLI installation.\n - Uses Docker-based utilities to generate registry login credentials via the
ecr:get-logincommand.\n- [COMMAND_EXECUTION]: The skill leverages standard command-line tools for repository and component management.\n - Uses
gitandghCLI for migrating codebases and managing secrets.\n - Employs
dockerfor local testing and production deployment cycles.\n- [CREDENTIALS_UNSAFE]: Guidance is provided for the secure management of platform credentials.\n - Instructs users on configuring
KBC_DEVELOPERPORTAL_PASSWORDand other tokens as GitHub secrets rather than hardcoding them.
Audit Metadata