arize-experiment
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the management of AI experiments through the
axCLI, involving operations such as listing experiments, creating runs, and exporting data. It also includes workflows for executing inference scripts locally. - [DYNAMIC_EXECUTION]: The
ax experiments runcommand allows for the execution of a Python task function defined in a local file (task.py). This is used to process dataset examples through custom logic or model APIs. - [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
arize-ax-cliand various LLM provider SDKs (such asopenai,anthropic, andgoogle-genai) from official package registries. - [INDIRECT_PROMPT_INJECTION]: As the skill processes dataset content that may contain untrusted data, it maintains a surface for indirect prompt injection.
- Ingestion points: External data enters the workflow via
ax datasets exportand is passed to inference scripts. - Boundary markers: The skill uses structured JSON for data handling, although specific sanitization of the content within those structures is left to the task implementation.
- Capability inventory: The skill possesses the capability to execute CLI commands and local Python scripts.
- Sanitization: The skill does not provide automatic sanitization for the content of processed dataset examples.
- [SAFE]: The skill demonstrates a high level of security awareness regarding secret management. It explicitly instructs the agent to never ask for API keys in chat, to use environment variables for credentials, and to avoid reading sensitive files like
.envfor anything other than non-secret identifiers.
Audit Metadata