ml-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill provides templates using
pickleandjoblibfor model serialization. These utilities are standard in ML workflows but pose a security risk if used to deserialize untrusted artifacts, as they can execute arbitrary code.\n- [INDIRECT_PROMPT_INJECTION]: The skill includes an attack surface for indirect prompt injection via the ingestion of external datasets (Parquet/CSV) inreferences/pipeline-orchestration.mdandreferences/feature-engineering.md. The skill includes capability for file writing and network operations (MLflow, WandB, GCS) but mitigates risk through provided data validation and schema checking templates (Great Expectations).\n- [EXTERNAL_DOWNLOADS]: The skill references the installation of standard, well-known libraries (e.g.,scikit-learn,pandas,mlflow,google-cloud-storage) and interacts with established services (MLflow, Weights & Biases, GCP, AWS) required for ML pipeline orchestration.
Audit Metadata