arize-evaluator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and evaluate untrusted data originating from external application traces and experiment runs.
- Ingestion points: External data is ingested via
ax spans exportandax experiments exportcommands described inSKILL.mdandreferences/troubleshooting.md. - Boundary markers: The skill utilizes double-brace
{{variable}}template placeholders to delimit external data within LLM evaluation prompts. - Capability inventory: The skill executes the
axCLI for platform interactions and can read local Python files using the@filepathsyntax to upload evaluator logic to Arize. - Sanitization: The skill promotes security and reliability by recommending binary labels, explicit response constraints, and a temperature of 0 for evaluation models, although it relies on the platform's execution environment for final processing.
Audit Metadata