zenml-pipeline-authoring

Pass

Audited by Gen Agent Trust Hub on Mar 26, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructs users to use the ZenML Secret Store (Client().get_secret()) for handling credentials, explicitly advising against hardcoding passwords or passing them as CLI arguments.
  • [SAFE]: The skill promotes the 'Artifact Golden Rule', ensuring data is managed through ZenML's artifact store rather than unsafe local filesystem paths, which enhances portability and security in remote environments.
  • [SAFE]: Dependency management is handled via standard pyproject.toml and DockerSettings, with a preference for uv for faster and more reliable resolution.
  • [SAFE]: The skill uses argparse for its CLI entry point to avoid dependency conflicts with the core library, demonstrating a high degree of technical care.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 26, 2026, 09:36 PM
Security Audit — agent-trust-hub — zenml-pipeline-authoring