searching-mlflow-traces
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION] (SAFE): Executes standard
mlflowCLI commands for searching and retrieving traces. This behavior is consistent with the skill's primary purpose.- [EXTERNAL_DOWNLOADS] (LOW): Fetches content fromhttps://mlflow.org/docs/latest/genai/tracing/search-traces.mdusingWebFetch. While the source is official documentation for the tool, it constitutes an external network request to a non-whitelisted domain.- [PROMPT_INJECTION] (LOW): Vulnerable to indirect prompt injection (Category 8). - Ingestion points: MLflow trace metadata, tags, span attributes from
mlflow traces searchoutput, and content fromWebFetch. - Boundary markers: Absent. No delimiters or instructions are provided to the agent to treat this external data as untrusted.
- Capability inventory: Ability to execute CLI commands (
mlflow). - Sanitization: None. Data is interpolated directly into the agent's context.
Audit Metadata