agent-eval
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill describes the use of the
Bashtool to interact with a CLI utility (agent-eval) and execute testing commands (e.g.,pytest,npm run build) through its "judge" mechanism. This behavior is consistent with the skill's primary purpose of evaluating code generated by agents. - [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface where task definitions (YAML files) containing prompts and shell commands are processed by the agent.
- Ingestion points: Task configuration files located in the
tasks/directory. - Boundary markers: None identified in the provided documentation.
- Capability inventory: Uses
Bash,Read,Write, andEdittools to perform evaluations and record results. - Sanitization: No specific sanitization or validation logic for the YAML-defined commands is described in the markdown content.
Audit Metadata