skills/metabase/agent-skills/metabase-modular-embedding-to-modular-embedding-sdk-upgrade/Gen Agent Trust Hub
metabase-modular-embedding-to-modular-embedding-sdk-upgrade
Pass
Audited by Gen Agent Trust Hub on Mar 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads version-specific documentation from the official Metabase website (metabase.com). This content is used to provide the agent with current API details and migration guidance.
- [EXTERNAL_DOWNLOADS]: The skill utilizes 'npm pack' and package installation tools to retrieve the '@metabase/embedding-sdk-react' package from the public NPM registry. This is a standard operation for a software migration utility targeting official vendor libraries.
- [COMMAND_EXECUTION]: The skill executes local helper scripts ('prepare.sh', 'read-sources.sh') included in the skill package. These scripts are used for environment preparation, such as creating temporary directories and extracting type definitions from the downloaded SDK.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external documentation ('llms-embedding-full.txt') which the agent processes to build migration mappings. While this represents an ingestion surface for external data, the use of official vendor documentation is consistent with safe and standard migration workflows.
Audit Metadata