The skill is malicious, enabling SQL injection and unauthorized Airflow CLI command execution while forcing unverified dependencies to bypass security controls and exfiltrate sensitive pipeline metadata.
npx skills add https://github.com/astronomer/agentsSQL injection — database system-object or file-access abuse (information_schema/xp_cmdshell/INTO OUTFILE/LOAD_FILE) detected
INFORMATION_SCHEMA.COLUMNS
By directing the agent to use 'af dags list' and 'af dags get', the skill assumes the agent has pre-configured CLI access to Airflow/Astro environments, potentially exposing sensitive pipeline metadata without explicit user authorization for those specific tools.
Use `af dags list` and `af dags get <dag_id>`
The skill explicitly instructs the agent to invoke a separate, external skill ('debugging-dags') if data is stale, creating a hard-coded dependency on an unverified third-party component.
Action: Investigate with **debugging-dags** skill
The skill includes instructions to execute arbitrary Airflow CLI commands and cross-references another skill, which exceeds the stated purpose of a simple data freshness check and introduces potential command injection or unauthorized system interaction risks.
The 'If Data is Stale' section explicitly directs the use of 'af dags list', 'af dags get', and 'af dags stats' commands.
Skill does not specify a license field. Specifying a license helps users understand usage terms.
[](https://mondoo.com/ai-agent-security/skills/github/astronomer/agents/checking-freshness)<a href="https://mondoo.com/ai-agent-security/skills/github/astronomer/agents/checking-freshness"><img src="https://mondoo.com/ai-agent-security/api/badge/github/astronomer/agents/checking-freshness.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/astronomer/agents/checking-freshness.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.