deploying-machine-learning-models

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates an automated deployment workflow where it analyzes user requirements and model data to generate code. This creates a surface where malicious instructions embedded in model metadata or data files could influence the agent's actions.
  • Ingestion points: User requests and model/dataset files provided for deployment (referenced in SKILL.md).
  • Capability inventory: Broad file writing (Write, Edit) and shell execution (Bash) capabilities are requested in the skill frontmatter to allow the skill to modify the system environment and deploy infrastructure.
  • Boundary markers: None identified; the instructions do not specify delimiters or warnings for the agent to ignore instructions within the data files it processes.
  • Sanitization: No specific validation or sanitization logic for user-provided data is defined in the instruction files.
  • [DYNAMIC_EXECUTION]: The skill generates code for REST API endpoints and containerization (Docker) at runtime based on the specific model provided. While this is the intended function, it involves the assembly of executable logic from external context provided during the interaction.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:44 AM