arize-admin
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
axCLI to manage administrative resources on the Arize platform. It incorporates a safety-first approach by requiring the agent to useAskUserQuestionfor confirmation before executing destructive commands likedeleteorrevoke. - [EXTERNAL_DOWNLOADS]: The documentation includes instructions for installing the
arize-ax-clipackage using standard package managers such aspip,pipx, anduv. This is the official CLI tool provided by the vendor for interacting with their service. - [CREDENTIALS_UNSAFE]: The skill includes explicit security constraints that prevent the agent from reading
.envfiles or searching the filesystem for credentials. It mandates that API keys should only be referenced via environment variables and never echoed, logged, or requested in plain text from the user. - [PROMPT_INJECTION]: The skill is designed to process output from the Arize API (via the CLI). While this presents a surface for indirect prompt injection if an attacker controls resource names, the skill mitigates this risk by requiring human confirmation for all high-impact actions.
Audit Metadata