manage-data
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection vulnerability surface where untrusted data could influence agent behavior.
- Ingestion points: Data enters the agent context through
ze.Dataset.pull()from external benchmark repositories or via local CSV files usingze.Dataset()inSKILL.mdandreferences/dataset-lifecycle.md. - Boundary markers: Absent. No specific delimiters or instructions are provided to separate data content from system instructions.
- Capability inventory: Ingested row data is processed within evaluation tasks (
dataset.eval()) or downstream logic via custom task functions (@ze.task) as shown inreferences/dataset-lifecycle.md. - Sanitization: Absent. The data is parsed and used directly without validation or input sanitization.
- [EXTERNAL_DOWNLOADS]: The skill installs the
zeroevalPython package from public registries during initialization inSKILL.md. This dependency matches the verified author context. - [COMMAND_EXECUTION]: The skill executes shell commands for environment setup and version control management, including
pip install zeroeval,zeroeval setup, and standard Git operations (git clone,git commit,git push) to interface withgit.llm-stats.comas outlined inSKILL.mdandreferences/git-workflow.md.
Audit Metadata