a2ui-add-eval-datapoint
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to execute several shell commands for managing the evaluation environment. This includes unlocking datasets with
transcrypt, running validation tests withpytest, and executing the core evaluation runnermain.pyusing theuvtool. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for authoring multi-turn conversation datasets that include system prompts and tool call examples which are processed by an LLM-as-a-judge.
- Ingestion points: Data is read from YAML files located in
eval/datasets/. - Boundary markers: The instructions do not specify the use of delimiters or boundary markers for these inputs.
- Capability inventory: The
main.pyscript performs model inference and scoring based on the messages, function calls, and qualitative targets defined in the datasets. - Sanitization: No explicit sanitization or filtering of the dataset content is described in the workflow.
Audit Metadata