stable-baselines3
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill utilizes Stable Baselines3's model loading and VecNormalize statistics loading features, which rely on Python's
picklemodule for deserialization. Loading untrusted.zipor.pklfiles can lead to arbitrary code execution. - Evidence:
scripts/evaluate_agent.pyandscripts/train_rl_agent.pyinvokealgorithm.load()andVecNormalize.load(). - Mitigation: The skill includes clear documentation and code comments warning the user that files must originate from a trusted source because persistence involves serialized Python objects.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
stable-baselines3package and its associated dependencies (such asgymnasiumandsb3-contrib) from public package registries. - Evidence:
SKILL.mdcontains installation commands likeuv pip install "stable-baselines3==2.9.0".
Audit Metadata