Audit History
dbt-transformation-patterns - 8 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v8 Latest | Jul 7, 2026, 07:13 AM | No confirmed findings | 0 | No capability change |
| v7 | Jul 7, 2026, 07:13 AM | No confirmed findings | 0 | No capability change |
| v6 | Jun 30, 2026, 10:41 PM | No confirmed findings | 0 | No capability change |
| v5 | Jun 30, 2026, 10:41 PM | No confirmed findings | 0 | No capability change |
| v4 | Jan 17, 2026, 08:06 AM | No confirmed findings | 0 | No capability change |
| v3 | Jan 17, 2026, 08:06 AM | No confirmed findings | 0 | Network accessExternal commands |
| v2 | Jan 4, 2026, 05:04 PM | No confirmed findings | 0 | No capability change |
| v1 | Jan 4, 2026, 05:04 PM | No confirmed findings | 0 | Baseline |
Jul 7, 2026, 07:13 AM
I reviewed SKILL.md and found no evidence of malicious intent, prompt injection, data exfiltration, or executable payloads. All static findings are false positives caused by Markdown fences, inline code, dbt SQL/YAML examples, standard dbt CLI examples, and documentation URLs. No semantic security findings were identified.
Risk Factors
⚙️ External commands (29)
🌐 Network access (4)
Jul 7, 2026, 07:13 AM
I reviewed SKILL.md and found no evidence of malicious intent, prompt injection, data exfiltration, or executable payloads. All static findings are false positives caused by Markdown fences, inline code, dbt SQL/YAML examples, standard dbt CLI examples, and documentation URLs. No semantic security findings were identified.
Risk Factors
⚙️ External commands (29)
🌐 Network access (4)
Jun 30, 2026, 10:41 PM
Static analysis flagged Markdown backticks, dbt model names, and documentation links as execution, cryptography, reconnaissance, and network risks. Review found a single Markdown guide with dbt examples, user-run CLI commands, and official resource links; no hidden execution, exfiltration, prompt injection, or malicious intent was found.
Static false positives ignored (4)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (1)
🌐 Network access (1)
Jun 30, 2026, 10:41 PM
Static analysis flagged Markdown backticks, dbt model names, and documentation links as execution, cryptography, reconnaissance, and network risks. Review found a single Markdown guide with dbt examples, user-run CLI commands, and official resource links; no hidden execution, exfiltration, prompt injection, or malicious intent was found.
Static false positives ignored (4)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Risk Factors
⚙️ External commands (1)
🌐 Network access (1)
Jan 17, 2026, 08:06 AM
Pure documentation skill containing only SQL and YAML examples for dbt patterns. The static analyzer produced false positives: YAML frontmatter markers were flagged as shell backticks, Jinja2 template syntax was flagged as command execution, and normal dbt CLI commands were flagged as reconnaissance. All findings are dismissed. No executable code, network calls, file system access, or external command execution capabilities exist.
Risk Factors
🌐 Network access (4)
⚙️ External commands (34)
Jan 17, 2026, 08:06 AM
Pure documentation skill containing only SQL and YAML examples for dbt patterns. The static analyzer produced false positives: YAML frontmatter markers were flagged as shell backticks, Jinja2 template syntax was flagged as command execution, and normal dbt CLI commands were flagged as reconnaissance. All findings are dismissed. No executable code, network calls, file system access, or external command execution capabilities exist.
Risk Factors
🌐 Network access (4)
⚙️ External commands (34)
Jan 4, 2026, 05:04 PM
Pure documentation skill containing only SQL and YAML examples for dbt patterns. No executable code, network calls, file system access, or external command execution capabilities. Contains only static educational content about data build tool practices.
Jan 4, 2026, 05:04 PM
Pure documentation skill containing only SQL and YAML examples for dbt patterns. No executable code, network calls, file system access, or external command execution capabilities. Contains only static educational content about data build tool practices.