meta-harness-optimization
Warn
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill implements a meta-optimization loop in
meta_harness.pythat relies on a proposer agent to generate new harness configurations and code modifications. These LLM-generated artifacts are then parsed and executed during the evaluation phase to determine their efficacy. - [INDIRECT_PROMPT_INJECTION]: The skill architecture is designed to ingest and process external datasets for evaluation, which presents a vulnerability to instructions embedded within that data.
- Ingestion points: Data enters the system through the
train_datasetandval_datasetarguments in themeta_harness_loopfunction withinmeta_harness.py. - Boundary markers: The provided prompt construction in
build_proposer_prompt(claude_wrapper.py) lacks explicit markers to differentiate between system instructions and potentially malicious content within the history or datasets. - Capability inventory: The framework utilizes the Anthropic SDK for network communication, includes capability for system interaction via
subprocess, and executes evolved code logic during evaluation steps. - Sanitization: There is no evidence of input validation, sanitization, or filtering of the dataset content before it is processed by the harness.
Audit Metadata