scikit-learn

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONINGCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions to execute local Python scripts (e.g., scripts/classification_pipeline.py). While these are standard examples, the actual execution logic resides in external files not included in the primary markdown files.
  • [METADATA_POISONING]: A discrepancy exists between the platform-reported author (sickn33) and the author specified in the frontmatter (K-Dense Inc.). Furthermore, the risk: critical tag in the metadata is unusual for a machine learning utility and could be misleading as it does not align with the tool's standard functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data, which introduces a potential injection surface. 1. Ingestion points: The skill reads from local data files using pd.read_csv('data.csv') within the detailed-guide.md file. 2. Boundary markers: Absent. The instructions do not include delimiters or warnings to treat data content as untrusted. 3. Capability inventory: The skill uses subprocess commands for script execution and package management (uv pip install). 4. Sanitization: None. The code snippets perform no validation or sanitization of the data being processed.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 09:08 AM
Security Audit — agent-trust-hub — scikit-learn