rajib2k5

Dbt Audit — Security skill for Claude Code

Security community

Audit a dbt project — layering violations, untested keys, unsafe incrementals, missing contracts, undocumented marts.

How to install Dbt Audit

Installs to ~/.claude/skills/rajib2k5-claude-staff-kit-dbt-audit/SKILL.md

Terminal
mkdir -p ~/.claude/skills/rajib2k5-claude-staff-kit-dbt-audit && curl -fsSL https://raw.githubusercontent.com/rajib2k5/claude-staff-kit/HEAD/commands/dbt-audit.md -o ~/.claude/skills/rajib2k5-claude-staff-kit-dbt-audit/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Dbt Audit does


description: Audit a dbt project — layering violations, untested keys, unsafe incrementals, missing contracts, undocumented marts argument-hint: [optional model selector or path]

Invoke the `data-dbt-audit` skill.

Scope: $ARGUMENTS (if empty, audit the whole project)

Execute the checks — do not read model code and infer. In particular:

  • grep -r "source(" models/ --include=*.sql | grep -v "models/staging" — every hit is a layering violation.
  • List every model whose primary key lac

Alternatives in Security

  • Security Guidance — Hook that warns about command injection, XSS, and unsafe patterns 14k ★
  • Skill Coverage Audit — Trace codepaths in diffs, map against tests, auto-generate missing coverage — use before shipping PRs 2.8k ★
  • Query Token Audit — Audit token security to detect scams, honeypots, and malicious contracts across BSC, Base, Solana, and Ethereu 483 ★

Full documentation available on GitHub

View Source Repository