eval-builder
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use various CLI tools including
lev eval,lev flowmind, andlev exec. It also provides validation shell commands usingtest,find, andrgto verify the presence of project files and configuration. - [DATA_EXFILTRATION]: The skill requires access to sensitive project files such as
.lev/config.yaml,dna/gates.yaml, andAGENTS.mdto establish the necessary context for building evaluation suites. This access is localized to the project environment for configuration resolution. - [PROMPT_INJECTION]: The skill is inherently designed to facilitate the creation of adversarial tests, including prompt injection probes, for other agentic features. This creates an indirect prompt injection surface as it processes external system descriptions.
- Ingestion points: Processes 'any topic or system from the supplied context', project DNA, and configuration files.
- Boundary markers: Utilizes structured YAML (LFD contracts) to define data, but lacks explicit delimiters or instructions to ignore embedded prompts within the systems it evaluates.
- Capability inventory: Possesses the ability to write to the local filesystem (receipts/proofs) and execute shell commands via the
levtool suite. - Sanitization: Promotes the use of 'typed observation payloads' and 'deterministic scoring' to validate agent outputs, though it does not provide specific sanitization for the inputs it ingests during the design phase.
Audit Metadata