Skills/Claude Code plugins/astronomer-data-agents

astronomer-data-agents@0.1.0

CAUTION

Publisher claims: "Data engineering for Apache Airflow and Astronomer. Author DAGs with best practices, debug pipeline failures, trace data lineage, profile tables, migrate Airflow 2 to 3, and manage local and cloud deployments." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher astronomer · joined 0 days agoInstalls 0Last detonated 55 min ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Access to sensitive file pathsREADME.md:275 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Prompt injectionskills/managing-astro-deployments/SKILL.md:161 · Prompt injection — explicit attempt to bypass safety measures

AST01

HIGH

npx invocation of non-well-known packageREADME.md:86 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Pipe-to-shell patternskills/analyzing-data/scripts/cli.py:50 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Destructive file system command detectedskills/deploying-java-sdk-bundles/SKILL.md:188 · Destructive file system command detected

AST05

CRITICAL

HTML comment carrying imperative instructions to the agentastro-airflow-mcp/README.md:1 · HTML comment carrying imperative instructions to the agent

AST01

CRITICAL

Pipe-to-shell patternskills/analyzing-data/scripts/kernel.py:112 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Pipe-to-shell patternskills/cosmos-dbt-fusion/SKILL.md:54 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

HIGH

Authorization escalation languageastro-airflow-mcp/README.md:413 · Authorization escalation language

AST01

CRITICAL

HTML comment carrying imperative instructions to the agentREADME.md:9 · HTML comment carrying imperative instructions to the agent

AST01

CRITICAL

Destructive file system command detectedskills/deploying-java-sdk-bundles/SKILL.md:208 · Destructive file system command detected

AST05

HIGH

Access to sensitive file pathsREADME.md:471 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

npx invocation of non-well-known packageREADME.md:45 · npx invocation of non-well-known package — may execute untrusted code

AST06

CRITICAL

Reads credential paths from the home directoryskills/delegating-to-otto/SKILL.md:125 · Reads credential paths from the home directory

AST03

HIGH

Access to sensitive file pathsREADME.md:299 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandskills/managing-astro-local-env/SKILL.md:78 · Process kill command — agent can terminate processes

AST05

MEDIUM

Remote installer piped to shellskills/analyzing-data/scripts/kernel.py:112 · Remote installer piped to shell

AST07

HIGH

Python subprocess execution detectedskills/analyzing-data/scripts/kernel.py:150 · Python subprocess execution detected

AST05

HIGH

Python subprocess execution detectedskills/analyzing-data/scripts/kernel.py:134 · Python subprocess execution detected

AST05

HIGH

Access to sensitive file pathsskills/troubleshooting-astro-deployments/SKILL.md:230 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/migrating-ai-sdk-to-common-ai/SKILL.md:57 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/airflow-plugins/SKILL.md:530 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandskills/analyzing-data/scripts/kernel.py:121 · Process kill command — agent can terminate processes

AST05

MEDIUM

Remote installer piped to shellskills/analyzing-data/scripts/cli.py:50 · Remote installer piped to shell

AST07

HIGH

Process kill commandskills/analyzing-data/scripts/kernel.py:240 · Process kill command — agent can terminate processes

AST05

HIGH

Access to sensitive file pathsskills/analyzing-data/scripts/warehouse.py:18 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/deploying-go-sdk-bundles/SKILL.md:78 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/migrating-ai-sdk-to-common-ai/SKILL.md:349 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/configuring-airflow-language-sdks/SKILL.md:52 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandskills/managing-astro-local-env/SKILL.md:76 · Process kill command — agent can terminate processes

AST05

HIGH

Instructs the agent to modify its persistent memory or instruction filesskills/warehouse-init/SKILL.md:239 · Instructs the agent to modify its persistent memory or instruction files

AST01

HIGH

Process kill commandskills/managing-astro-local-env/SKILL.md:27 · Process kill command — agent can terminate processes

AST05

HIGH

Access to sensitive file pathsskills/airflow-plugins/SKILL.md:246 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Process kill commandskills/managing-astro-local-env/SKILL.md:311 · Process kill command — agent can terminate processes

AST05

HIGH

Python subprocess execution detectedskills/analyzing-data/scripts/kernel.py:432 · Python subprocess execution detected

AST05

HIGH

Access to sensitive file pathsskills/deploying-java-sdk-bundles/SKILL.md:214 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Access to sensitive file pathsskills/delegating-to-otto/SKILL.md:125 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Instructs the agent to modify its persistent memory or instruction filesskills/warehouse-init/SKILL.md:215 · Instructs the agent to modify its persistent memory or instruction files

AST01

HIGH

Access to sensitive file pathsskills/analyzing-data/scripts/warehouse.py:21 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

MEDIUM

Remote installer piped to shellskills/cosmos-dbt-fusion/SKILL.md:54 · Remote installer piped to shell

AST07

HIGH

Persistence: instructs the agent to auto-load this skill in future sessionsskills/migrating-airflow-2-to-3/SKILL.md:3 · Persistence: instructs the agent to auto-load this skill in future sessions

AST01

HIGH

Process kill commandskills/managing-astro-local-env/SKILL.md:288 · Process kill command — agent can terminate processes

AST05

HIGH

Persistence: instructs the agent to auto-load this skill in future sessionsskills/migrating-dagster-to-airflow/SKILL.md:3 · Persistence: instructs the agent to auto-load this skill in future sessions

AST01

HIGH

Access to sensitive file pathsskills/migrating-ai-sdk-to-common-ai/SKILL.md:370 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

Python subprocess execution detectedskills/analyzing-data/scripts/kernel.py:141 · Python subprocess execution detected

AST05

HIGH

Instructs the agent to modify its persistent memory or instruction filesskills/warehouse-init/SKILL.md:210 · Instructs the agent to modify its persistent memory or instruction files

AST01

HIGH

Auto-update or dynamic fetch configurationskills/delegating-to-otto/SKILL.md:261 · Auto-update or dynamic fetch configuration — agent may load new code at runtime

AST06

HIGH

Access to sensitive file pathsskills/analyzing-data/scripts/warehouse.py:22 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05