arize-annotation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could theoretically contain malicious instructions, but it includes appropriate safety guardrails.
- Ingestion points: The skill ingests JSON record sources via the
ax annotation-queues add-recordscommand and DataFrames through thearizePython SDKupdate_annotationsmethod. - Boundary markers: The skill includes specific directives instructing the agent to never read
.envfiles, search the filesystem for credentials, or ask the user to paste secrets into the chat interface. - Capability inventory: Capabilities are focused on network operations to the Arize API via the CLI and SDK for annotation management.
- Sanitization: Data is validated against project-specific annotation schemas defined within the Arize space.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official software from the vendor.
- Evidence: The skill instructions refer to installing the
arize-ax-cliand using thearizePython package. These are verified official tools provided by the vendor (arize-ai) for interacting with their platform. - [COMMAND_EXECUTION]: The skill utilizes command-line tools to interact with remote platform resources.
- Evidence: The skill provides examples for using the
axCLI to list, create, and update annotation configurations and queues, which are standard operations for the tool's intended purpose.
Audit Metadata