llm-evals-checklist
Pass
Audited by Gen Agent Trust Hub on Apr 23, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill analyzes potentially untrusted local data stored in project logs and datasets. Ingestion points: The skill searches for and reads content from .json, .csv, and .log files (SKILL.md). Boundary markers: Absent; the instructions do not specify using delimiters to isolate file content. Capability inventory: The skill performs file system reads and searches for specific keyword patterns. Sanitization: None; file content is used to determine readiness status and populate notes in a summary report. This analysis of local data is consistent with the skill's primary purpose.
- [EXTERNAL_DOWNLOADS]: Includes a reference to official documentation at docs.latitude.so, which belongs to the skill's author, to guide the user in setting up observability.
- [DATA_EXPOSURE]: Instructs the agent to check for the existence of environment variables like LATITUDE_API_KEY. This check is performed locally within the environment to verify project configuration and does not involve transmitting the credentials to external services.
Audit Metadata