temper-eval-calibrate
Pass
Audited by Gen Agent Trust Hub on Jun 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute shell commands via the Bash tool to run local Python modules (
python -m skills.temper.evals.run_evals). - [COMMAND_EXECUTION]: Shell commands are constructed using user-supplied parameters such as
<run-id-prefix>. The skill explicitly mitigates command injection risks by instructing the agent to validate the prefix against a strict regular expression (^[A-Za-z0-9_][A-Za-z0-9_-]{0,28}$) before proceeding with execution. - [DATA_EXPOSURE]: The skill manages state and results by reading from and writing to files in the
skills/temper/evals/directory, including JSON result files and iteration sentinels.
Audit Metadata