scikit-learn
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONINGCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute local Python scripts (e.g., scripts/classification_pipeline.py). While these are standard examples, the actual execution logic resides in external files not included in the primary markdown files.
- [METADATA_POISONING]: A discrepancy exists between the platform-reported author (sickn33) and the author specified in the frontmatter (K-Dense Inc.). Furthermore, the risk: critical tag in the metadata is unusual for a machine learning utility and could be misleading as it does not align with the tool's standard functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data, which introduces a potential injection surface. 1. Ingestion points: The skill reads from local data files using pd.read_csv('data.csv') within the detailed-guide.md file. 2. Boundary markers: Absent. The instructions do not include delimiters or warnings to treat data content as untrusted. 3. Capability inventory: The skill uses subprocess commands for script execution and package management (uv pip install). 4. Sanitization: None. The code snippets perform no validation or sanitization of the data being processed.
Audit Metadata