ml-experiment-tracker

Pass

Audited by Gen Agent Trust Hub on Apr 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical guide for implementing machine learning experiment tracking workflows. No malicious intent or suspicious patterns were detected in the instructions or code examples.
  • [COMMAND_EXECUTION]: In 'references/reproducibility-checklist.md', the skill includes Python snippets using 'subprocess.check_output' to capture git metadata (commit hashes and branch names). This is a standard and legitimate technique for ensuring experiment provenance in machine learning development.
  • [CREDENTIALS_UNSAFE]: The 'references/mlflow-setup.md' file contains example connection strings and Docker Compose configurations that use default or placeholder credentials (e.g., 'postgresql://mlflow:mlflow@db:5432/mlflow'). These are clearly marked as examples for local development environments and do not leak sensitive production information.
  • [EXTERNAL_DOWNLOADS]: The skill mentions installation of well-known Python packages ('mlflow', 'wandb', 'psycopg2-binary') and Docker images ('postgres', 'mlflow') from official and trusted registries. These references are documented neutrally as part of the setup instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 19, 2026, 03:25 AM