skills/keboola/ai-kit/build-component/Gen Agent Trust Hub

build-component

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for setting up development environments using official vendor resources.\n
  • Downloads the Keboola CLI via an installation script from https://cli.keboola.com/install.sh.\n
  • Fetches project templates using cookiecutter from the keboola/cookiecutter-python-component GitHub repository.\n- [REMOTE_CODE_EXECUTION]: Development and deployment workflows include the execution of scripts from trusted sources.\n
  • Utilizes a shell pipe (curl | bash) for the official CLI installation.\n
  • Uses Docker-based utilities to generate registry login credentials via the ecr:get-login command.\n- [COMMAND_EXECUTION]: The skill leverages standard command-line tools for repository and component management.\n
  • Uses git and gh CLI for migrating codebases and managing secrets.\n
  • Employs docker for local testing and production deployment cycles.\n- [CREDENTIALS_UNSAFE]: Guidance is provided for the secure management of platform credentials.\n
  • Instructs users on configuring KBC_DEVELOPERPORTAL_PASSWORD and other tokens as GitHub secrets rather than hardcoding them.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 12:02 AM