dbt-core
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or safety violations were detected. The skill is designed for legitimate local environment management and follows non-interactive patterns suitable for AI agents.
- [EXTERNAL_DOWNLOADS]: The skill downloads installers for Miniconda and Miniforge. These resources are fetched from well-known and official repositories: repo.anaconda.com and the conda-forge organization on GitHub. These are standard and trusted sources for Python distribution tools.
- [REMOTE_CODE_EXECUTION]: Automated shell and batch scripts execute the downloaded installers to set up the development environment. This behavior is transparent, user-approved through presented options, and originates from official software vendors.
- [COMMAND_EXECUTION]: The skill executes local commands to verify Python and dbt installations, manage virtual environments, and install packages from standard registries. This includes shell initialization (conda init), which is a standard procedure for integrating environment managers into a user's terminal workflow.
Audit Metadata