skills/databricks-solutions/vibe-coding-workshop-template/mlflow-genai-foundation/Gen Agent Trust Hub
mlflow-genai-foundation
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill defines patterns for evaluating and tracing agent responses which process untrusted user input (Indirect Prompt Injection). This represents a vulnerability surface inherent to agent monitoring, but the skill specifically mitigates this by instructing users to implement MLflow's built-in safety scorers and guidelines adherence metrics.
- Ingestion points: Agent request objects in
ResponsesAgent.predict()andevaluation_dataprocessed bymlflow.genai.evaluate(). - Boundary markers: Encourages the use of
GuidelinesAdherencewith explicit behavioral constraints for LLM-based evaluation judges. - Capability inventory: The skill utilizes MLflow's standard model logging and tracing capabilities, and the Databricks SDK for metadata management.
- Sanitization: Promotes the use of the
ResponsesAgentframework which enforces structured schema validation for inputs and outputs. - [EXTERNAL_DOWNLOADS]: The skill references established, well-known libraries including
mlflow,pandas, anddatabricks-sdkin its configuration snippets and requirements. These originate from official, trusted sources within the Databricks ecosystem and do not constitute an external dependency risk.
Audit Metadata