model-registry-governance
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install standard Python libraries (
mlflow[extras],psycopg2-binary,boto3) required for model registry management and database communication. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of model metadata and binary artifacts, which are used to update registry tags and metrics.
- Ingestion points:
register_model.pyingests ametadatadictionary and reads the artifact atmodel_path;promote_model.pytakes command-line parameters for version and approver info. - Boundary markers: The skill implements Pydantic-based schema validation and provides examples for OPA policy enforcement.
- Capability inventory: The scripts interact with the filesystem (reading artifacts), perform cryptographic hashing (SHA-256), and communicate with a remote MLflow tracking server via HTTP.
- Sanitization: Inbound metadata is validated against the
ModelMetadataschema to ensure data integrity before registration.
Audit Metadata