The Agent Skills Directory

[DYNAMIC_EXECUTION]: The skill utilizes joblib.load() for deserializing machine learning models and scalers from disk.
Evidence: The ModelServer class in SKILL.md uses joblib.load(model_path) to initialize the model.
Evidence: The global instance model_server = ModelServer("model.pkl") demonstrates loading a local file.
Risk: joblib and its underlying pickle implementation are susceptible to arbitrary code execution during the deserialization process. If an agent or user uses this skill to load a model file from an untrusted source, it could lead to system compromise.

ml-expert