This skill has not been reviewed yet — status: Pending
Back to Skill DetailsTrust Level
Not yet reviewed
Security Confidence
Awaiting review
License
Apache-2.0
Test Coverage
No Tests
Static analysis scanning for dangerous code patterns including eval(), exec(), network calls, and file system access.
Cross-referenced against 70+ antivirus engines for known malware signatures and suspicious behavior patterns.
Pattern matching for obfuscated code, credential harvesting, data exfiltration, and encoded payloads.
Manual security review by GritFlow engineers for high-risk or edge-case skills.
GritFlow hasn't completed a security review of dbt-performance yet, so we don't make a safety claim about it (status: Pending). Review the skill's code and source repository before installing.
GritFlow's review uses up to four layers: (1) code-pattern analysis for dangerous functions, (2) cross-referencing against 70+ antivirus engines via VirusTotal, (3) deep scanning for obfuscated code and credential harvesting, and (4) human review for high-risk skills. The review is rolling out across the catalog — a skill that hasn't completed review is shown as Pending.
Not yet — dbt-performance is marked Pending and has no assigned trust level. Review the skill and its source repository before installing.
