eval
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes evaluation runs via the
uv run evalcommand and provides utility commands for log monitoring and trace analysis. - [INDIRECT_PROMPT_INJECTION]: The skill processes external tasksets (e.g., GSM8K, AIME25) which may contain instructions that could be interpreted by the agent during evaluation.
- Ingestion points: Benchmark data is ingested from taskset identifiers specified in
SKILL.mdor TOML configuration files. - Boundary markers: There are no explicit instructions to the agent to treat task data as untrusted or to use delimiters to separate instructions from data.
- Capability inventory: The skill specifically configures evaluation environments using
bashharnesses andsubprocessruntimes, providing a functional path for command execution. - Sanitization: No sanitization or filtering logic is documented for the task content before it is processed by the evaluation runtime.
- [DYNAMIC_EXECUTION]: The framework allows for the dynamic configuration of agent runtimes, including
subprocessand shell-based execution environments, to facilitate diverse benchmark types.
Audit Metadata