The skill performs unauthorized network and system operations without declaring required capabilities and relies on external, unverified documentation, creating significant security and reliability risks.
npx skills add https://github.com/astronomer/agentsSKILL.md links to "reference/config-changes.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[reference/config-changes.md](reference/config-changes.md)
SKILL.md links to "reference/migration-checklist.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[reference/migration-checklist.md](reference/migration-checklist.md)
SKILL.md links to "reference/migration-patterns.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[reference/migration-patterns.md](reference/migration-patterns.md)
SKILL.md links to "reference/removed-methods.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
[reference/removed-methods.md](reference/removed-methods.md)
Skill does not specify a license field. Specifying a license helps users understand usage terms.
[](https://mondoo.com/ai-agent-security/skills/github/astronomer/agents/migrating-airflow-2-to-3)<a href="https://mondoo.com/ai-agent-security/skills/github/astronomer/agents/migrating-airflow-2-to-3"><img src="https://mondoo.com/ai-agent-security/api/badge/github/astronomer/agents/migrating-airflow-2-to-3.svg" alt="Mondoo Skill Check" /></a>https://mondoo.com/ai-agent-security/api/badge/github/astronomer/agents/migrating-airflow-2-to-3.svgSkills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.