agent-evals
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines test fixtures containing adversarial prompts to evaluate agent safety. While these are intended for testing, they represent the skill's primary data ingestion surface.
- Ingestion points: The
INJECTION_PROMPTSarray inevals/test_safety.pyand JSON fixtures inevals/fixtures/unit_cases.json. - Boundary markers: Not explicitly used in the code snippets; the framework relies on observing agent refusals.
- Capability inventory: Calls to
generate_response,plan_tool_calls, andAgent.runwhich process these prompts. - Sanitization: Not present, as the framework's purpose is to pass adversarial strings directly to the agent to verify its internal guardrails.
- [EXTERNAL_DOWNLOADS]: The skill documentation and CI/CD examples reference the installation of standard development and evaluation tools.
- Downloads and executes
promptfoovianpxfor interactive evaluation. - Installs Python dependencies such as
pytestand theanthropicSDK viapipwithin GitHub Actions workflows. - [COMMAND_EXECUTION]: Provides instructions for executing various CLI tools for testing and infrastructure validation.
- Includes execution patterns for
pytest,npx promptfoo, and development commands likekubectl diffandgit diff.
Audit Metadata