instrumenting-with-mlflow-tracing
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing standard packages from established registries (e.g., pip install mlflow, npm install mlflow-tracing). These are legitimate libraries for the stated purpose.\n- [CREDENTIALS_UNSAFE]: The documentation describes using environment variables for authentication (MLFLOW_TRACKING_TOKEN, MLFLOW_TRACKING_PASSWORD), which is a standard and recommended practice for secret management. No hardcoded credentials are present.\n- [COMMAND_EXECUTION]: Code examples include verification steps that execute MLflow search commands locally to confirm tracing status. These are intended for developer verification and do not perform unauthorized actions.\n- [DATA_EXFILTRATION]: While the skill facilitates the transmission of trace data to a tracking server, this is the primary purpose of the tool. The documentation includes explicit patterns for PII (Personally Identifiable Information) and sensitive field redaction to prevent accidental exposure.
Audit Metadata