databricks-mlflow-evaluation
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of documentation, architectural patterns, and code examples for developers using MLflow 3 and Databricks. It does not contain any executable scripts, automated shell commands, or obfuscated code.
- [PROMPT_INJECTION]: The static analysis hits for prompt injection in
references/patterns-datasets.mdandreferences/user-journeys.mdare false positives. The phrases "Ignore previous instructions" and "What is your system prompt?" are explicitly categorized as examples of "Adversarial Cases" that developers should include in their evaluation datasets to test the robustness of their agents. These are data samples for testing, not instructions to the AI agent. - [CREDENTIALS_UNSAFE]: The skill demonstrates secure credential handling by using placeholders such as
<YOUR_API_TOKEN>and<SQL_WAREHOUSE_ID>in code examples. It correctly advises users to manage sensitive information via environment variables rather than hardcoding them into source code. - [EXTERNAL_DOWNLOADS]: The documentation references standard installations of established libraries like
mlflowandopenaifrom official package registries. All external URLs point to official Databricks documentation, the MLflow GitHub organization, or Databricks-owned domains, which are trusted sources for this skill authored by Databricks.
Audit Metadata