scikit-learn

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary purpose is educational and provides standard templates for machine learning workflows using established Python libraries. No malicious behavior or intent was detected across the documentation or scripts.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of well-known and reputable Python packages from standard registries, including scikit-learn, pandas, numpy, matplotlib, seaborn, category-encoders, imbalanced-learn, and umap-learn. These are standard tools in the data science ecosystem.
  • [COMMAND_EXECUTION]: The documentation includes standard practices for model persistence using pickle and joblib. While these methods are common in the scikit-learn community, they involve deserialization which can be a security risk if used to load models from untrusted or unverified sources.
  • [DATA_EXFILTRATION]: The skill provides templates for reading data from external files (e.g., CSV). This represents a standard surface for indirect prompt injection if the ingested data contains malicious instructions and the agent's output is subsequently used for critical decision-making without human review.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 03:46 PM
Security Audit — agent-trust-hub — scikit-learn