scikit-learn
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is educational and provides standard templates for machine learning workflows using established Python libraries. No malicious behavior or intent was detected across the documentation or scripts.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of well-known and reputable Python packages from standard registries, including
scikit-learn,pandas,numpy,matplotlib,seaborn,category-encoders,imbalanced-learn, andumap-learn. These are standard tools in the data science ecosystem. - [COMMAND_EXECUTION]: The documentation includes standard practices for model persistence using
pickleandjoblib. While these methods are common in the scikit-learn community, they involve deserialization which can be a security risk if used to load models from untrusted or unverified sources. - [DATA_EXFILTRATION]: The skill provides templates for reading data from external files (e.g., CSV). This represents a standard surface for indirect prompt injection if the ingested data contains malicious instructions and the agent's output is subsequently used for critical decision-making without human review.
Audit Metadata