sc-evaluate
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (e.g.,
scripts/run_eval.pyoreval/run.py) via the bash tool. While this is the primary function of the skill, it involves running arbitrary code located within the user's project environment. - [DYNAMIC_EXECUTION]: In Phase 1 and 3, the skill dynamically discovers the path to an evaluation script and subsequently executes it using the Python interpreter. The execution of code from dynamically determined paths introduces a level of uncertainty regarding the exact instructions being run.
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the processing of untrusted data.
- Ingestion points: The agent reads content from
gold_standards/,test_data/, and generatedresults/(referenced in SKILL.md Phases 5 and 6). - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing external text data.
- Capability inventory: The skill utilizes
bashto run commands andwriteto generate evaluation reports and suggestions. - Sanitization: There is no evidence of sanitization or filtering of the inputs being analyzed before they are used to generate prompt improvement recommendations.
Audit Metadata