migrate-from-model-serving

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads MLflow model artifacts and code dependencies from the user's Databricks workspace using the mlflow.artifacts.download_artifacts API.
  • [COMMAND_EXECUTION]: Employs the databricks CLI for workspace authentication, model management, and deployment via Databricks Asset Bundles (DABs).
  • [COMMAND_EXECUTION]: Uses the uv package manager to execute Python scripts with specific dependencies, such as mlflow[databricks] and databricks-sdk, for artifact retrieval and local testing.
  • [SAFE]: The skill follows security best practices by using profile-based authentication (--profile <profile>) and instructing users to store configuration/secrets in .env files rather than hardcoding them.
  • [SAFE]: All external resources and tools (MLflow, Databricks CLI, uv) are well-known, reputable developer tools consistent with the skill's primary purpose of migrating Databricks-hosted assets.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 06:08 AM
Security Audit — agent-trust-hub — migrate-from-model-serving