ml-experiment-tracker
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for implementing machine learning experiment tracking workflows. No malicious intent or suspicious patterns were detected in the instructions or code examples.
- [COMMAND_EXECUTION]: In 'references/reproducibility-checklist.md', the skill includes Python snippets using 'subprocess.check_output' to capture git metadata (commit hashes and branch names). This is a standard and legitimate technique for ensuring experiment provenance in machine learning development.
- [CREDENTIALS_UNSAFE]: The 'references/mlflow-setup.md' file contains example connection strings and Docker Compose configurations that use default or placeholder credentials (e.g., 'postgresql://mlflow:mlflow@db:5432/mlflow'). These are clearly marked as examples for local development environments and do not leak sensitive production information.
- [EXTERNAL_DOWNLOADS]: The skill mentions installation of well-known Python packages ('mlflow', 'wandb', 'psycopg2-binary') and Docker images ('postgres', 'mlflow') from official and trusted registries. These references are documented neutrally as part of the setup instructions.
Audit Metadata