{"slug":"jeremylongshore-detecting-eval-exec-usage","source_name":"jeremylongshore/detecting-eval-exec-usage","name":"Jeremylongshore/Detecting Eval Exec Usage","description":"Scan a source tree for dynamic-code-execution APIs that an attacker\ncan hijack: Python eval / exec / compile, JavaScript eval /\nFunction() / setTimeout(string), Ruby eval / instance_eval /\nclass_eval, Java ScriptEngine, PHP eval / assert($str), .NET\nActivator.CreateInstance / Reflection.Emit with dynamic input.\nUse when: pre-commit gate on any application that parses\nuser-uploaded code (rule engines, formula evaluators,\nplugin systems), or post-bug-report when \"we run user-supplied\nexpressions.\"","version":1,"lift":{"pass_rate_delta_pts":29.17,"pass_rate_pct":87.5,"total_cases":24,"passed_cases":21,"tokens_delta_pct":-11.9,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-14T11:52:57.870055+00:00"},"skill_score":0.875,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":29.17,"with_pass_pct":87.5,"without_pass_pct":58.3,"tokens_delta_pct":-11.9,"turns_delta_pct":0,"total_cases":24,"cases_aggregated":22,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-14T11:52:57.870055+00:00","run_id":"e99b9f3e-dae2-47af-9fa4-42d7c466c0c7","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"manifest_hash":"e2ccb709024f1191632721b577513f23683b838e5e955694056808ba9e096580","raw_url":"https://app.decimal.ai/s/jeremylongshore-detecting-eval-exec-usage/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/jeremylongshore-detecting-eval-exec-usage"}