·
Last changedVersion:
This version passed the hardening gate. Hardening applied 1 targeted change and preserved all other text. Classified findings before hardening: 6. Classified findings closed: 0. Classified findings remaining: 6. Unclassified scanner findings remaining: 0. Review findings closed: 1. Review findings remaining: 14.
4
2
4
2
Expand | File | Group | Subtype | Severity | Status |
|---|---|---|---|---|---|
SKILL.md | Tool & MCP Manipulation | MCP over-permissioning | Medium | Open | |
references/agent-evaluation.md | Excessive Agency & Rogue Autonomy | — | Medium | Open | |
BENCHMARK.md | Sensitive Data & Secret Exposure | Agent snooping | Medium | Open | |
SKILL.md | Prompt Injection | Indirect prompt injection | Medium | Open | |
references/api-auth.md | Prompt Injection | — | Low | Open | |
assets/specs/llm_as_judge.json | Tool & MCP Manipulation | MCP configuration abuse | Low | Open |
6 findings
The Plugin CLI entrypoint is uv run nemo evaluator.
Use this skill to choose an evaluation interface and metric, validate a minimal example, submit a NeMo Platform evaluation job, and retrieve its results.
Establish these inputs before building an evaluation:
Read Metric Selection before choosing a metric for a rubric, RAG workflow, or tool-calling evaluation.
| Need | Interface |
|---|---|
Fast metric iteration without NeMo Platform |
|
Dataset-driven platform job |
|
Multiple inline/stored metric refs in one job |
|
Task-driven platform job |
|
Reusable platform definitions and result indexes |
|
Default to submit for every plugin evaluation. The plugin's local execution
path — client.evaluator.run() and the nemo evaluator ... run CLI verb — is
being retired, so do not build on it even though --help still lists it. For
fast metric iteration without the platform, use the standalone
nemo_evaluator_sdk.Evaluator instead.
api_key_secret is an environment-variable name standalone but a NeMo
Platform secret name on submit. See API Auth.intent is grader metadata and is never shown to the agent; only inputs
reaches it.item.* for dataset rows but reference.*, sample.*,
and inputs.* in agent evaluation.job.wait_until_done() before retrieving results or downloading
artifacts.All commands in this file assume that the shell's working directory is the root of the NVIDIA-NeMo/nemo-platform repository.
In a NeMo Platform repository checkout, run commands through the workspace:
When the skill and plugin are installed, use the installed nemo command
without assuming a repository root or manually activating .venv.
Resolve bundled assets relative to this skill directory. In this repository the
canonical path is skills/nemo-evaluator-plugin; an installed skill may live
under a different skills root.
| Path | Use |
|---|---|
| Two-row offline smoke spec; submit as-is |
| Online generation + judge; local-first ( |
| Task-driven Fabric runner spec |
| Copyable SDK snippets for each plugin surface |
| Script | Purpose | Arguments |
|---|---|---|
| drift-check bundled specs |
|
In this repository, NeMo uses the displayed workspace command:
Do not assume a client-specific run_script() helper; use the displayed
uv run command.
field_mapping.Standalone SDK evaluation
Use AgentEvaluator().run(...) for standalone task-driven SDK evaluation. Its
target can be a Model, a GenericAgent, or a direct AgentTaskRunner.
Platform job evaluation
Use the plugin agent-evaluate submit job for platform task evaluation. Its
target is a ModelTarget, AgentTarget, CodexRunnerTarget,
FabricRunnerTarget, or HarborRunnerTarget; alternatively provide
precomputed trials. Provide exactly one of target or trials.
Submission accepts inline tasks or a stored TasksetRef. Stored tasksets are
resolved in the target workspace.
Read Agent Evaluation for inline tasks,
TasksetRef, concurrency, fail-fast behavior, result artifacts, and runner
configuration.
Fabric runner examples and tests need the optional harness adapters and the matching Relay gateway:
The install script downloads the checksum-verified nemo-relay binary that
matches the locked Python bindings. Add its reported directory to PATH, then
use uv run --frozen --no-sync ... for Fabric checks so uv does not remove the
optional adapters.
Report a completed platform evaluation in this form:
Read Evaluator troubleshooting when schema, authentication, job, result, or runner behavior fails.
Never print, serialize, or commit secret values. Store only environment-variable names or platform secret references in specs and examples.
Get started with chainctlchainctl skill install public/nvidia/nemo-evaluator-plugin:latest
Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.
skills.cgr.dev/public/github.com/nvidia/skills/nemo-evaluator-plugin:latest
Apache-2.0
BENCHMARK.md
HARDENING.md
SKILL.md
assets/examples/plugin_sdk_examples.py
assets/specs/exact_match_metric.json
assets/specs/fabric_agent_eval.json
assets/specs/llm_as_judge.json
evals/evals.json
references/agent-evaluation.md
references/api-auth.md
references/evaluation-shapes.md
references/execution.md
references/llm-judge.md
references/metric-selection.md
references/resources.md
references/troubleshooting.md
scripts/generate_example_specs.py
skill-card.md
skill.oms.sig