benchjack

Map vulnerabilities and task IDs in AI benchmark evaluation pipelines.

42|5|Updated Apr 15, 2026
One-click install
npx skills add https://github.com/benchjack/benchjack --skill benchjack
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: benchjack
Source: https://github.com/benchjack/benchjack/tree/main/.claude/skills/benchjack
Command: npx skills add https://github.com/benchjack/benchjack --skill benchjack

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

BenchJack provides a security-audit workflow for AI benchmarks to uncover vulnerabilities in evaluation pipelines, such as data leakage, isolation issues, and prompt-injection risks.

Core Features & Use Cases

  • Automated security audit of AI benchmarks to reveal evaluation vulnerabilities (V1–V8).
  • Static + AI hybrid analysis using a suite of checks and custom rules to map risk across tasks.
  • Generates structured findings and task mappings to guide authors in hardening benchmarks and improving reliability.

Quick Start

Run the BenchJack scanner on a benchmark repository to reveal evaluation vulnerabilities.

Frequently Asked Questions about benchjack

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit AI benchmark evaluation pipelines for security vulnerabilities?

To audit AI benchmark evaluation pipelines, you run a security scanner on the benchmark repository to reveal evaluation vulnerabilities. It parses benchmark configurations and artifact paths to produce structured findings and task mappings for hardening evaluation logic.

What types of vulnerabilities can affect AI benchmark evaluation logic?

AI benchmark evaluation logic can be affected by vulnerabilities including data leakage, isolation issues, and prompt-injection risks. A security audit maps these risks across tasks using custom rules to generate structured findings that guide authors in improving reliability.

Can I scan Dockerized benchmark environments for evaluation isolation issues?

Yes, you can scan Dockerized benchmark environments for evaluation isolation issues. The scanner applies to benchmark repos and codebases that implement evaluation logic, including Dockerized environments and LLM-based judging, to enumerate task IDs and map vulnerabilities.

How do I map task IDs and config artifacts in an AI benchmark codebase?

To map task IDs and config artifacts in an AI benchmark codebase, you parse the benchmark configuration and artifact paths within the repository. This enumeration is part of a security audit that produces a structured summary of vulnerabilities and task mappings.

Does LLM-based judging in benchmarks introduce prompt-injection risks?

Yes, LLM-based judging in benchmarks introduces prompt-injection risks. A security audit workflow uncovers these evaluation vulnerabilities by applying static and AI hybrid analysis with custom rules to map risk across tasks.

What is the best way to harden AI benchmarks against data leakage?

The best way to harden AI benchmarks against data leakage is to run an automated security audit that generates structured findings and task mappings. These guide authors in fixing evaluation vulnerabilities and improving overall pipeline reliability.