eval-author-discover
Warn
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill dynamically loads and executes Python code from the repository being analyzed.
- Evidence:
scripts/providers/harbor/_judge.pyusesimport_classto load agent code from paths defined in repository configurations. - Evidence:
scripts/providers/gym/_judge.pygenerates a shell/Python wrapper (_LAUNCHER) that usesimportlib.util.module_from_specandspec.loader.exec_moduleto execute averifier.pyscript provided by the repository. - [COMMAND_EXECUTION]: The skill executes various system commands to perform its tasks.
- Evidence:
scripts/providers/harbor/_solve.pyexecutesharbor run, which triggers the execution of repository-supplied solution scripts (solve.sh). - Evidence:
scripts/providers/gym/_judge.pyandscripts/providers/gym/_solve.pyexecute thegymCLI tool for manifest validation and testing. - Evidence:
scripts/_other_evals.pyexecutesgit ls-filesto scan for evaluation-like code patterns. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the analyzed repository to guide its execution flow.
- Ingestion points:
scripts/providers/harbor/_explore.pyandscripts/providers/gym/_explore.pyread YAML, JSON, and JSONL configuration files from the target repository. - Boundary markers: The skill uses
yaml.safe_load(or falls back to a regex key scan) to parse configuration files. - Capability inventory: The skill can execute subprocesses (
harbor,gym,git), read/write files in scratch directories, and dynamically import Python modules. - Sanitization: Uses
yaml.safe_loadfor structured data and applies basic regex-based name sanitization (_UNSAFE_NAME) inscripts/providers/gym/_judge.pyfor task IDs.
Audit Metadata