OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail4 providerslatest audit May 6, 2026
Independent checks from skills.sh's audit partners.
The skill is generally safe and originates from dbt Labs. It allows for indexing and querying dbt project metadata locally. While it includes automated installation via shell scripts and SQL execution capabilities, these are standard vendor functionalities. A minor concern exists regarding indirect prompt injection from processed dbt project metadata, though the skill provides guidance to mitigate this risk.
Detected behaviors
No alerts
1 issue
1 finding · Score: 82/100