waxa-eval
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of components via
apmandnpx @mizchi/waxa. These tools are provided by the skill author for the purpose of skill evaluation. - [COMMAND_EXECUTION]: Instructions involve running CLI commands such as
waxa init,waxa iterate, andwaxa auditto manage the evaluation lifecycle of agent skills. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external scenario data from
tasks/*.yamlfiles and evaluate the resulting outputs. It defines ingestion points in theevals/directory and utilizes a restricted execution environment for the agent being tested to mitigate risks associated with untrusted prompt content. - [DYNAMIC_EXECUTION]: Implements a multi-stage evaluation loop where code snippets (JS expressions) and LLM-based graders are dynamically applied to analyze the performance and safety of other skills.
Audit Metadata