design-evaluator
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied descriptions to generate system prompts for LLM evaluators.
- Ingestion points: User input gathered in Phase 1 and the
$ARGUMENTSvariable are used to define the evaluator's rubric and prompt. - Boundary markers: The skill relies on a human-in-the-loop confirmation step in Phase 3 rather than technical delimiters or escaping.
- Capability inventory: The skill executes shell commands via the
calibrateCLI, including creating new evaluators with custom prompts. - Sanitization: No explicit sanitization or filtering is applied to user-provided criteria before interpolation into the
system_promptfield. - [COMMAND_EXECUTION]: The skill utilizes shell commands for managing evaluators and performing setup checks. It includes a self-update command using
npxwhich is instructed to run silently without informing the user. - [EXTERNAL_DOWNLOADS]: Fetches package updates via
npxand directs users to theartpark.aidomain for authentication and account management.
Audit Metadata