modelopt-evaluation
Fail
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the 'uv' tool from the well-known service 'astral.sh' and executes its installation script via the shell in
scripts/nel-next.shandrecipes/examples/gym/example_mrcr.yaml. - [REMOTE_CODE_EXECUTION]: The skill installs the
nemo-evaluatorandnemo-evaluator-launcherpackages directly from GitHub using theuvxtool at specific commit SHAs. It also fetches thelivecodebenchandNVIDIA-NeMo/Gympackages from GitHub repositories as part of its setup routine. - [COMMAND_EXECUTION]: The skill uses shell scripts (
scripts/nel-next.sh,scripts/nel-gym.sh) for environment orchestration and includespre_cmdinstructions in its configuration files to execute setup commands inside containers, such as package installation or file retrieval. - [DYNAMIC_EXECUTION]: In
references/doom_loops.md, the skill provides a script to dynamically patch the source code of thevllmlibrary at runtime within the serving container to remap status codes for specific benchmarks. - [INDIRECT_PROMPT_INJECTION]: The skill evaluates untrusted data in the form of model outputs and benchmark results, creating a potential surface for indirect prompt injection.
- Ingestion points: Untrusted data enters the agent context through model responses and benchmark rollout artifacts processed in
references/run-validation.mdandrecipes/tasks/gym/mrcr.md. - Boundary markers: The skill uses structured YAML and JSON formats for communication, though it does not explicitly implement natural language boundary markers for all ingested model outputs.
- Capability inventory: The skill possesses the capability to execute shell commands, perform file operations, and make network requests to judge and inference endpoints.
- Sanitization: A 'Bounded Evaluation-Failure Policy' described in
references/run-validation.mdis implemented to detect and handle malformed or systemic failure cases in model responses before scores are processed.
Recommendations
- HIGH: Downloads and executes remote code from: https://astral.sh/uv/install.sh - DO NOT USE without thorough review
Audit Metadata