airflow-plugins

The instructions explicitly state that FastAPI plugin endpoints are not automatically protected by Airflow auth, shifting the burden of security to the user without providing secure-by-default templates. [severity raised to high: this vector is independently flagged by both deterministic and LLM analysis (ADR-0065 corroboration).]

FastAPI plugin endpoints are not automatically protected by Airflow auth. If your endpoints need to be private, implement authentication explicitly using FastAPI's security utilities.

The skill provides code patterns for direct database access to Airflow's internal metadb, which can lead to scheduler corruption or state inconsistency if misused. [severity raised to high: this vector is independently flagged by both deterministic and LLM analysis (ADR-0065 corroboration).]

The Airflow metadb is not a public interface. Direct writes or poorly-formed queries can corrupt scheduler state.

The `fastapi_root_middlewares` pattern allows plugins to intercept all Airflow API requests, creating a potential vector for global request logging, modification, or credential interception. [severity raised to high: this vector is independently flagged by both deterministic and LLM analysis (ADR-0065 corroboration).]

Middleware applies to all Airflow API requests, including the built-in REST API and any FastAPI plugins.

The skill instructs users to store Airflow credentials in environment variables (`MYPLUGIN_USERNAME`, `MYPLUGIN_PASSWORD`), which are often logged or exposed in process dumps. [severity raised to high: this vector is independently flagged by both deterministic and LLM analysis (ADR-0065 corroboration).]

AIRFLOW_USER = os.environ.get("MYPLUGIN_USERNAME", "admin")

Skill executes commands, writes files, or accesses the network but declares no allowed-tools, so its tool surface cannot be reviewed or constrained.