generate-verifiers-env
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill generates templates that ingest external data via the
datasetslibrary without providing boundary markers or sanitization logic to separate instructions from data. - Ingestion points:
env.py(viadatasets.Dataset.from_listingestion into thevf.ToolEnvdataset). - Boundary markers: Absent in the generated
create_verifiers_envtemplates; there are no instructions to the agent to wrap external data in delimiters. - Capability inventory: The generated environment supports stateful sandboxes (e.g., E2B), file system interaction via toolkit methods, and LLM tool calling capabilities.
- Sanitization: No sanitization, escaping, or filtering is prescribed for the input dataset content before it is processed by the agent in the environment rollout.
- [EXTERNAL_DOWNLOADS]: The skill configuration and generated
pyproject.tomlinclude dependencies on external libraries and infrastructure. - Packages: Fetches
verifiers,e2b-desktop,openai, anddatasetsfrom official registries. - Context: These references target well-known technology providers and official package repositories for the intended development purpose.
Audit Metadata