arize-experiment
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
axCLI to interact with the Arize platform for experiment CRUD operations, data export, and annotation.- [DYNAMIC_EXECUTION]: The skill facilitates the execution of local Python code through theax experiments run --task task.pycommand and provides templates for custom inference scripts (infer.py). This is a core feature for running custom evaluation logic against datasets.- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from dataset exports and model outputs. If this data were processed as natural language instructions by an agent without proper boundaries, it could serve as a vector for indirect prompt injection. - Ingestion points: Data from
ax datasets exportoutput,runs.json, andannotations.jsonfiles. - Boundary markers: No explicit delimiters or instructions are specified for isolating the ingested data within the agent's prompt context.
- Capability inventory: The skill allows for command execution via the
axCLI, local Python script execution, and file system write operations. - Sanitization: The instructions do not define specific sanitization or filtering logic for the content of the datasets or model outputs.
Audit Metadata