ai-ml-principal-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates and architectural patterns for RAG (Retrieval-Augmented Generation) and inference APIs that ingest and process untrusted external data.
- Ingestion points:
nlp.mddefines aRAGSystemclass, andmlops.mdprovides a FastAPIPredictionRequestschema for accepting user features. - Boundary markers: The skill includes explicit guidelines in
SKILL.mdandevaluation-and-guardrails.mdfor implementing prompt injection resistance, refusal policies, and output validation. - Capability inventory: The templates include model execution, local file reading (model artifacts), and network operations for logging and monitoring.
- Sanitization:
nlp.mdprovides aclean_textutility that performs Unicode normalization (NFKC) and removes potentially problematic characters. - [DYNAMIC_EXECUTION]: The skill references standard machine learning deserialization practices necessary for model serving.
mlops.mdincludes templates usingjoblib.loadto restore scikit-learn model artifacts.transformers-llm.mdanddeep-learning.mdprovide code for loading models viatorch.loadandtorch.jit.load.- These operations are routine for AI/ML workflows and focus on loading artifacts from a governed model registry.
- [EXTERNAL_DOWNLOADS]: The skill references and integrates with well-known, trusted AI/ML registries and platforms.
- Fetches models and tokenizers from HuggingFace using the
transformerslibrary (AutoModel.from_pretrained). - Integrates with industry-standard MLOps services like Weights & Biases and MLflow for experiment tracking.
- References official container images from NVIDIA and Python for training and serving environments.
- [COMMAND_EXECUTION]: Provides standard developer workflows for validation and automated deployment.
SKILL.mdlists benign validation commands such aspytest,ruff, andmypy.mlops.mdincludes standard GitHub Actions workflows and Docker configuration for continuous integration and deployment.
Audit Metadata