ml-pipeline-workflow
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is instructional in nature, providing templates and best practices for MLOps workflows. No executable malicious code or suspicious patterns were found.
- [SAFE]: The skill references established industry tools such as Apache Airflow, MLflow, and cloud services (AWS SageMaker, Google Vertex AI), which are treated as safe integration points.
- [SAFE]: The workflow describes ingesting data from external sources, which represents a theoretical attack surface for indirect prompt injection. However, the skill provides architectural guidance and recommends validation libraries to mitigate risk.
- Ingestion points: The 'Production Workflow' section in SKILL.md describes ingesting raw data from external sources.
- Boundary markers: None are explicitly defined in the provided templates.
- Capability inventory: The skill defines workflows but does not implement active command execution or network scripts.
- Sanitization: Best practices advise using validation libraries like Great Expectations and TFX.
- [SAFE]: No obfuscated URLs, base64-encoded payloads, or unauthorized network operations were detected in the skill content.
Audit Metadata