stable-baselines3

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill utilizes Stable Baselines3's model loading and VecNormalize statistics loading features, which rely on Python's pickle module for deserialization. Loading untrusted .zip or .pkl files can lead to arbitrary code execution.
  • Evidence: scripts/evaluate_agent.py and scripts/train_rl_agent.py invoke algorithm.load() and VecNormalize.load().
  • Mitigation: The skill includes clear documentation and code comments warning the user that files must originate from a trusted source because persistence involves serialized Python objects.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the stable-baselines3 package and its associated dependencies (such as gymnasium and sb3-contrib) from public package registries.
  • Evidence: SKILL.md contains installation commands like uv pip install "stable-baselines3==2.9.0".
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 01:41 AM