deepeval-evaluation
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
deepevalpackage from PyPI usingpip install -U deepeval. This is a standard installation procedure for a well-known open-source tool. - [COMMAND_EXECUTION]: The skill utilizes the
deepevalCLI (e.g.,deepeval test run) to execute evaluation tests. This is the intended functionality of the framework and is performed locally on the user's machine. - [DATA_EXFILTRATION]: The skill mentions
deepeval loginto integrate with the Confident-AI dashboard. This is an optional, documented feature of the tool for tracking evaluation results and does not involve unauthorized data access. - [INDIRECT_PROMPT_INJECTION]: The skill defines evaluation test cases that ingest external data (inputs, actual outputs, and retrieval contexts). While this presents a surface for indirect prompt injection, it is inherent to the purpose of an LLM evaluation framework and the skill does not grant excessive privileges or perform dangerous operations with this data.
Audit Metadata