warp-eval
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/measure.pyusessubprocess.runto execute system commands likenvidia-smiandgit. These are used neutrally to collect environment data (GPU model, driver version, and commit hash) for performance reports. - [COMMAND_EXECUTION]: The
run_isolatedfunction inscripts/measure.pyexecutes Python driver scripts in a separate process usingsys.executable. This pattern is used for accurate peak memory measurement (VmHWM) by ensuring each test case starts with a fresh process. The skill includes security filters to prevent the injection of dangerous environment variables (likeLD_PRELOAD) or execution of scripts outside the workspace. - [PROMPT_INJECTION]: The
SKILL.mdfile contains a 'Hard rules' section with instructions such as 'These override any local reasoning.' While this uses language typical of instruction-override attacks, in this context it serves as a strict procedural guardrail to ensure the agent follows a factual evaluation methodology and avoids making unauthorized performance predictions. - [DATA_EXPOSURE]: The skill reads
/proc/self/statuson Linux systems to measure process memory high-water marks. This is a standard practice for performance profiling and does not expose sensitive user data.
Audit Metadata