ae-evaluation
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's primary functionality is achieved through the execution of
ae-clicommands to interact with the Agent Evaluation platform. The instructions provide specific command structures for managing datasets, evaluators, connections, and evaluation runs. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data for evaluation purposes, which represents a potential surface for indirect prompt injection.
- Ingestion points: Local files are ingested via
+import_datasetinreferences/datasets.md, and external traces are imported from AI Monitor via+import_ai_monitor_tracesinreferences/integrations.md. - Boundary markers: The skill does not explicitly define prompt-level delimiters or boundary markers for the data being evaluated.
- Capability inventory: The skill possesses the capability to read and write files and perform network operations through the
ae-clitool. - Sanitization: The documentation highlights that the
ae-clitool redacts secrets, credentials, and session tokens from command logs and error envelopes to prevent accidental exposure. - [SAFE]: The skill follows security best practices by requiring user confirmation for high-risk write operations (such as deletions or role changes) and by treating credentials as write-only secrets that are never logged or echoed.
Audit Metadata