The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill provides documentation and code templates in references/workflows.md that suggest using the Python pickle module for saving and loading model objects. The use of pickle.load() to deserialize data is an unsafe practice because the module is not secure against maliciously constructed data. Loading a compromised pickle file can lead to arbitrary code execution on the user's system. While the skill correctly identifies and recommends safer alternatives like to_netcdf elsewhere, the inclusion of the pickle pattern creates a potential vulnerability if followed by users handling external files.

pymc-bayesian-modeling