promptic
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data such as LLM traces, user-provided datasets, and evaluation rubrics, which creates a potential surface for indirect prompt injection.
- Ingestion points: Data is ingested via the
promptic_sdk.init()tracing mechanism, thecreate_observationsAPI method, and CLI commands likepromptic observations addas described inSKILL.md. - Boundary markers: The documentation does not specify explicit delimiters or instruction-ignore markers for processed data.
- Capability inventory: The skill performs network operations to the official platform domain and interacts with the local file system for configuration in
~/.promptic/config.toml. - Sanitization: No specific sanitization or filtering logic for ingested data is detailed in the provided instructions.
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
promptic-sdkpackage and its various provider-specific extras (such asopenai,anthropic, andlangchain) from the official Python package registry. - [COMMAND_EXECUTION]: The skill utilizes the
prompticCLI tool for managing authentication, workspace configuration, and triggering agent evaluations.
Audit Metadata