opik-verify
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources and the local environment which could be manipulated to influence the agent's decision-making or behavior.
- Ingestion points: Data is read from the
opik-release-policy.yamlfile and the Opik API (specifically experiment metadata, dataset items, assertion results, and trace reasons). - Boundary markers: There are no explicit delimiters or instructions provided to the agent to treat the data as non-executable text when processing assertion reasons or inputs.
- Capability inventory: The skill has access to
Bashfor command execution andWritefor file modifications. - Sanitization: The instructions do not specify any sanitization or escaping of the strings retrieved from the Opik API before they are used in the analysis report.
- [EXTERNAL_DOWNLOADS]: The skill depends on the
opikPython SDK to communicate with the Comet.ml/Opik services. This is a legitimate vendor resource used for the skill's intended purpose.
Audit Metadata