evaluating-llms-harness
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The documentation describes using the
lm_evalCLI and provides Python examples usingos.systemto automate evaluation workflows. These are standard practices for the benchmarking tool and do not involve unauthorized execution. - [EXTERNAL_DOWNLOADS]: The skill recommends installing established packages like
lm-eval,transformers, andvllmfrom public registries. References to datasets and model weights target well-known repositories like HuggingFace and official project pages. - [REMOTE_CODE_EXECUTION]: The instructions explicitly mention the
--allow_code_executionflag, which is a required feature for evaluating model-generated code in benchmarks like HumanEval. This is documented as a necessary step for the specific task. - [CREDENTIALS_UNSAFE]: The skill provides instructions for configuring API keys via environment variables using placeholder values, adhering to standard security practices for managing secrets.
Audit Metadata