evals-validate
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard evaluation frameworks using
npx promptfoo,pytest, andpython. These commands are consistent with the skill's primary purpose of running evaluation suites and validating results. - [EXTERNAL_DOWNLOADS]: The use of
npxto runpromptfoomay involve downloading the package from the official NPM registry. This is expected behavior for Node.js-based development tooling. - [DATA_EXFILTRATION]: The skill processes evaluation results and configuration files within the local project directory (e.g.,
evals/results/,.adlc/). There is no evidence of sensitive data being transmitted to external or unauthorized servers.
Audit Metadata