sagemaker-mlflow
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and scripts do not contain any malicious patterns. It performs standard cloud infrastructure tasks such as listing resources and verifying connectivity using official libraries.
- [COMMAND_EXECUTION]: The skill uses Python scripts to interact with AWS services via the boto3 SDK. These operations (listing MLflow apps and checking identity) are legitimate for the skill's purpose and follow standard authentication patterns.
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the 'sagemaker-mlflow' Python package. This is a legitimate plugin for MLflow and its reference does not constitute a security risk.
- [DATA_EXPOSURE]: The skill processes the 'MLFLOW_TRACKING_URI' and AWS credentials through standard SDK calls. No sensitive data is hardcoded or exfiltrated to non-whitelisted domains.
Audit Metadata