eval-model
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
lm-evalharness viasubprocess.Popeninscripts/eval_dataset.py. This is a standard and isolated method for running the benchmarking tool. - [EXTERNAL_DOWNLOADS]: The skill fetches benchmark datasets (e.g., GSM8K, MMLU) from Hugging Face and installs required Python packages using the Pixi environment manager. These downloads target well-known and reputable services essential for the skill's primary function.
- [DATA_EXFILTRATION]: The skill reads the
OPENAI_API_KEYfrom the environment and includes it in theAuthorizationheader for requests sent to the user-specified--base-url. This is the standard mechanism for authenticating with OpenAI-compatible model endpoints. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from external datasets for the purpose of model evaluation. While this creates a data ingestion surface, it is a necessary component of model benchmarking.
- Ingestion points: Benchmark samples are loaded from Hugging Face in
scripts/_eval_tasks.py. - Boundary markers: Not explicitly defined for dataset samples, as the tool relies on automated scoring against ground-truth labels.
- Capability inventory: The skill has access to network operations (for API calls) and subprocess execution (for the evaluation harness).
- Sanitization: The skill processes dataset content as provided by Hugging Face to ensure the integrity of standard benchmark results.
Audit Metadata