retrieving-mlflow-traces
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is designed to interact with MLflow, an open-source platform for the machine learning lifecycle. All commands and logic are consistent with the stated purpose of retrieving and searching execution traces.
- [EXTERNAL_DOWNLOADS]: The skill utilizes a
WebFetchtool to retrieve documentation frommlflow.org. This is a well-known and official domain for the MLflow project, making the download of configuration and syntax guidelines a safe operation. - [COMMAND_EXECUTION]: The skill provides examples of
mlflow tracesCLI commands. These are standard operations for the tool and do not involve privilege escalation, persistence, or sensitive file access. - [PROMPT_INJECTION]: A potential surface for indirect prompt injection exists where the
WebFetchtool extracts data based on a prompt. However, because the target URL is the official documentation, the risk is negligible. - [DATA_EXPOSURE_AND_EXFILTRATION]: While the skill retrieves trace data, it does so within the local execution environment or against the configured MLflow server. There are no patterns suggesting the exfiltration of sensitive credentials or files to unauthorized third parties.
Audit Metadata