evalscope-docs
Warn
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions to install Python packages directly from GitHub repository commits during the setup phase of certain benchmarks.
- File
references/benchmarks/perspective_gap_prompt_writing.mdsuggests installing fromgithub.com/WhymustIhaveaname/PerspectiveGap.git. - File
references/benchmarks/claw_eval.mdsuggests installing fromgithub.com/claw-eval/claw-eval.git. - [REMOTE_CODE_EXECUTION]: The framework is designed to execute code generated by models or provided within datasets for evaluation tasks.
- Many benchmarks described, such as
bigcodebench,humaneval, andswe_bench, involve the execution of Python or shell scripts generated by the agent or model being tested. - The skill mitigates this risk by recommending and providing configurations for isolated Docker-based sandbox environments (
ms-enclave). - [CREDENTIALS_UNSAFE]: Example code for specific benchmark tasks contains hardcoded credentials for public testing services.
- File
references/benchmarks/bigcodebench_hard.mdincludes an FTP password (rNrKYTX9g7z3RgJRmxWuGHbeu) for the public siteftp.dlptest.com. This is part of the task definition but matches credential patterns. - [PROMPT_INJECTION]: The skill facilitates the processing of large datasets sourced from the internet, which creates an indirect prompt injection surface.
- Ingestion points include GitHub issues in
swe_benchand various web-scraped documents in retrieval benchmarks. - The documentation provides boundary markers and sandbox configurations to prevent model-generated content from escaping the execution environment.
Audit Metadata