70High
The skill performs instruction boundary manipulation and relies on missing external documentation, creating potential for unauthorized runtime content injection and unpredictable workflow behavior.
Skill Info
Namedbt-labs/dbt-agent-skills/migrating-dbt-project-across-platforms
Registrygithub
Version89089329137c
PURLpkg:github/dbt-labs/dbt-agent-skills@89089329137c?skill=migrating-dbt-project-across-platforms
Stars568
Installs165
Source
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
GitHub
165 installs
Skills.shDocs
npx skills add https://github.com/dbt-labs/dbt-agent-skillsAssessments (2)
AI Agent Traps ↗Instruction boundary manipulation detectedhighprompt injectionAML.T0051AML.T0051.000AML.T0051.001AML.T0054LLM01:2025
Instruction boundary manipulation detected
100% confidenceline 52
### Instruction
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/generating-unit-tests.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Generating Unit Tests](references/generating-unit-tests.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/installing-dbt-fusion.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Installing dbt Fusion](references/installing-dbt-fusion.md)
Referenced file missing from skill packagelowpolicy violation
SKILL.md links to "references/switching-targets.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime
90% confidence
[Switching Targets](references/switching-targets.md)
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/dbt-labs/dbt-agent-skills/migrating-dbt-project-across-platforms)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/dbt-labs/dbt-agent-skills/migrating-dbt-project-across-platforms"><img src="https://mondoo.com/ai-agent-security/api/badge/github/dbt-labs/dbt-agent-skills/migrating-dbt-project-across-platforms.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/dbt-labs/dbt-agent-skills/migrating-dbt-project-across-platforms.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow