eval-harness-updater
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a standard set of tools for web research and local file manipulation. The instructions specifically mandate research from reputable sources like arXiv and Exa.
- [SAFE]: The JavaScript implementation in
scripts/main.cjsis limited to safe path resolution and argument parsing. It does not use dangerous functions such aseval(),exec(), orspawn(). - [SAFE]: The path resolution logic correctly identifies the project root and manages local paths for evaluation harnesses without introducing security risks.
- [SAFE]: No signs of prompt injection, data exfiltration, obfuscation, or persistence mechanisms were detected in the skill files.
Audit Metadata