model-registry-governance
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The
SKILL.mdfile contains a plain-text password placeholder in an instructional command snippet (postgresql://mlflow:password@db:5432/mlflow). While included as an illustrative baseline example configuration, hardcoded credential strings should be avoided in favor of environment variable interpolation, as demonstrated correctly in the companiondocker-compose.yamltemplate. - [COMMAND_EXECUTION]: The setup instructions include native shell commands (
pip install,mlflow server ...) to instantiate the orchestration stack locally. These are standard implementation practices for infrastructure scaffolding and do not execute dynamically outside explicit operator initiation.
Audit Metadata