design-agent-evals
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes the
uvpackage manager to execute thedesign-agentCLI tool. This is a project-specific command used for listing and running evaluation tasks, which is the primary purpose of the skill. - Indirect Prompt Injection Surface: The skill instructs the agent to read and summarize evaluation reports (
report.json,README.md). While these are generated by the evaluation framework, reading data produced by tests involves a theoretical surface for indirect instructions. - Ingestion points: Evaluation reports (
report.json,README.md) and task output files located inworkspace/out/evals/. - Boundary markers: None specified in the instructions.
- Capability inventory: Execution of shell commands via
uv runand file system read access. - Sanitization: No explicit sanitization or filtering of the report content is mentioned.
Audit Metadata