optimize
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill operates primarily by executing shell commands via the
evoCLI to manage code experiments, benchmarks, and sub-agent workflows. It also uses standard system utilities likenvidia-smiandpsfor resource monitoring within theevo-optimize.jsworkflow driver. - [INDIRECT_PROMPT_INJECTION]: The skill processes output from external benchmark runs (
outcome.jsonand trace files) to inform its optimization strategy. This pattern analysis is a core function but constitutes an ingestion point for data generated by potentially untrusted experiment code. - Ingestion points: Evaluation outcomes and task traces are read by scan sub-agents in Step 3 of the orchestrator loop to identify shared failure causes.
- Boundary markers: Prompt instructions for sub-agents mandate the use of verbatim evidence and focus strictly on optimization goals to mitigate the impact of speculative or malicious content in logs.
- Capability inventory: The orchestrator possesses capabilities to spawn sub-agents, execute bash commands, and perform file system operations.
- Sanitization: The skill relies on structural constraints and specific sub-agent briefs rather than automated sanitization of log data.
- [DATA_EXFILTRATION]: The skill includes a telemetry reporting mechanism for providing feedback to the developers.
- Evidence: The skill body for the
evo telemetry feedbackcommand contains explicit safety instructions: "Do not include repo names, company names, file paths, commands, prompt text, raw logs, URLs, secrets, dataset names, or exact task examples" to protect user privacy.
Audit Metadata