eval-author-task-create
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/task_pipeline.pyutilizessubprocess.runto orchestrate task scaffolding and verification. - Evidence: It invokes the Harbor CLI (
harbor task init) and the Python interpreter for NeMo Gym scaffolding. - Controls: Commands are constructed using logic within the script, primarily targeting local executables and known CLI tools.
- [DYNAMIC_EXECUTION]: Several scripts utilize dynamic importing techniques to share logic across the local repository structure.
- Evidence:
scripts/gym_scaffold.pyusesimportlib.import_moduleto load NeMo Gym's internal scaffolding libraries. - Evidence:
scripts/candidate_admission.py,scripts/construction_plan.py, andscripts/task_evidence.pymodifysys.pathat runtime to import from a siblingeval-authordirectory. - Context: This is a functional requirement for the multi-skill architecture used by the author to maintain shared libraries.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted data during task creation.
- Ingestion points:
SKILL.mdandscripts/candidate_admission.pyprocess ATIF traces (recorded interactions) and audit report JSON files. - Boundary markers: The skill instructions emphasize privacy reviews and include a "Proposal-to-construction decision boundary" to validate requirements before execution.
- Capability inventory: The skill can write to the local filesystem and execute commands via the Harbor/NeMo Gym runtimes.
- Sanitization:
scripts/task_pipeline.pyimplements regex-based sanitization (re.sub) for task slugs derived from tool names.
Audit Metadata