eval
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions and decision flowchart guide users to execute evaluation scripts locally using the
bunruntime environment (e.g.,bun path/to/eval.ts). This execution is required to run the production logic and capture performance metrics. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted input via the
TEST_CASESconfiguration in the provided implementation patterns. - Ingestion points: Untrusted data enters the agent context through the
TEST_CASESarray in theeval.tsfile. - Boundary markers: There are no explicit boundary markers or "ignore" instructions within the code snippets, as the skill relies on the production logic being tested to handle inputs.
- Capability inventory: The skill includes the capability to write to the local file system (
fs.writeFile,fs.writeFileSync) and relies on terminal execution for operation. - Sanitization: No input sanitization or validation is implemented within the provided templates, as the primary purpose is to observe raw model behavior.
- [EXTERNAL_DOWNLOADS]: The skill metadata includes a source link to
https://il.ly/skills/eval, which is a resource provided by the author 'illyism'. This link serves as a reference for the skill's origin.
Audit Metadata