Agent Platform Eval FlywheelCAUTION
Agent Skills for Google products and technologies
Overview
Agent Skills for Google products and technologies
8a2d7acb02afOBSERVED · 2026-10-23What it tells the agent
The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.
---
name: agent-platform-eval-flywheel
metadata:
version: "1.0.3"
category: AiAndMachineLearning
description: >-
Measures and improves the quality of AI models and agents on Google Cloud
using the Eval Quality Flywheel methodology. Use when generating synthetic
user scenarios, evaluating an agent or model, building an eval dataset,
picking or writing evaluation metrics, analyzing failures, comparing results
before and after a fix, or when guidance is needed on Agent Platform eval
methodology — including dataset schema, LLM-as-judge scoring, and common
failure causes. For fine-tuning, use agent-platform-tuning. For general
production deployment, use agent-platform-deploy.
---
# Agent Platform Eval Flywheel Skill
Help users evaluate and iteratively improve GenAI models and agents using the
Agent Platform GenAI Evaluation SDK (`google.genai` / `agentplatform`).
## When to use this skill
- Evaluating GenAI agents or models with the Agent Platform GenAI Evaluation
SDK (`client.evals.evaluate()`).
- Creating evaluation datasets from session traces, pandas DataFrames, or
synthetic generation.
- Selecting, configuring, or writing custom evaluation metrics.
- Analyzing rubric verdicts, loss patterns, and clustering failures.
- Suggesting concrete code/prompt improvements based on eval results.
- Evaluating a model served on an Agent Platform **endpoint** (BYOM) or a
**Model-as-a-Service (MaaS)** model by ID — including deploying the model
first if needed. For this case, follow
[references/deployment.md](references/deployment.md) and use the
`endpoint_evaluation.py` / `maas_evaluation.py` scripts.
## Safety & Confirmation Tiers (CRITICAL)
Before executing any commands or scripts on behalf of the user, you MUST adhere
to the following safety tiers based on the action requested:
1. **Tier R**: Read-only (`inspect_results.py`, `compare_results.py`,
`validate_dataset.py`, `parse_adk_traces.py`, `render_html_report.py`)
* **Rule**: No confirmation needed. You may execute these helper scripts
immediately to inspect data, validate schemas, parse traces, or compare
evaluation results.
2. **Tier M: Read-only with Compute Costs (`client.evals.run_inference`,
`client.evals.evaluate`, `client.evals.generate_conversation_scenarios`,
`client.evals.generate_loss_clusters`)**
* **Rule**: These operations invoke LLMs or remote evaluation services
that consume compute resources and incur costs. This requires
**interactive confirmation** with 'Yes'/'No' options.
* **Confirmation for EVERY evaluation run**: Every evaluation,
re-evaluation, metric update, parameter change, or synthetic scenario
generation requires its own dry-run preview and interactive
confirmation. Never execute a second evaluation, comparison pass, or
modified evaluation without presenting a new confirmation preview and
obtaining user approval.
* **Same-turn restriction**: Do not run the evaluation in the same turn as
presenting the confirmation prompt. End your turn after asking and wait
for the user's reply; only execute after explicit 'Yes' / approval.
Printing a preview and then calling the tool before the user can answer
does not count as obtaining confirmation.
* **No Pre-Execution of Remote Evaluation**: NEVER execute
`client.evals.evaluate()`, `client.evals.run_inference()`,
`client.evals.generate_conversation_scenarios()`, or run any script
invoking these remote operations before user confirmation. In the
initial turn, you may prepare local data structures and compose the
script, but you MUST present the dry-run preview card and obtain
explicit user confirmation before running any remote evaluation or
scenario generation call.
* **Immediate Execution Upon Approval**: Once the user explicitly approves
(e.g., 'Yes', 'Approved', 'Go ahead', 'Proceed'), proceed directly to
executing the previewed evaluation script via `run_command` and report
the results. Do not conclude the turn without executing the approved
action.
## Setup
The scripts need `vertexai` (from `google-cloud-aiplatform[evaluation]`),
`google-genai`, `pandas`, and `requests`. Do **not** create a virtual
environment — it starts empty and hides packages the environment already
provides, forcing a redundant install. Probe, and install only what is missing:
```bash
python3 -c "import vertexai, google.genai, pandas, requests" \
|| pip install 'google-cloud-aiplatform[evaluation]>=1.163.0' 'google-genai>=1.0.0'
```
The version specifiers must stay quoted: unquoted, bash reads `>=1.154.0` as a
redirect and silently writes an empty file instead of constraining the install.
Need `GOOGLE_CLOUD_PROJECT` and `GOOGLE_CLOUD_LOCATION`.
- **Preserve User Project and Location**: Always prioritize the user's
explicitly provided project and location (e.g. `project='<PROJECT_NUMBER>'`,
`location='us-central1'`). Never change or override the user's requested
location to 'global' unless the user explicitly requested 'global'.
- **Missing Parameters**: If the user's request omits the project or location,
you MUST pause in your response and ask the user for the missing
location/project before preparing or running the evaluation.
### Correct SDK entrypoints
```python
import agentplatform
client = agentplatform.Client(project=PROJECT, location=LOCATION)
client.evals.run_inference(model=..., src=...)
client.evals.evaluate(dataset=..., metrics=...)
client.evals.generate_conversation_scenarios(...)
```
Two imports that look plausible and are not:
- `from agentplatform.types import evals` -- `ModuleNotFoundError`. `types` is
a module, not a package; use `from agentplatform import types`.
- `from vertexai.evaluation import PointwiseMetric, EvalTask` -- the
superTrust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (4)
"Δmean",
"Δpass",
"Δmean": "delta_mean",
"Δpass": "delta_pass",
Gates applied: no_behavioural_pass.
8a2d7acb02affull audit observations/trust-audit/skill/google__agent-platform-eval-flywheel.json · Report an issue / request a re-scanAudit history
Every audit this skill has had.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-23 | 8a2d7acb02af | CAUTION | B | 89 | first audit |
Questions
What does the agent-platform-eval-flywheel — google/skills skill do?
Agent Skills for Google products and technologies
Is agent-platform-eval-flywheel — google/skills safe to install?
With care. The audit graded it B (89/100) and found 4 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can agent-platform-eval-flywheel — google/skills access on my machine?
The audit observed that it reaches the network. Each of those is consistent with what it says it does. Secrets in the source: none found.
How current is this page?
The grade is for one exact copy of the source (8a2d7acb02af), read on 2026-10-23. The repository is watched, and a new audit runs when it changes — this is the first audit.
Add this badge to your README
Shows this page's audit result and links back to it. It updates when the audit does.
[](https://modelsatlas.com/skills/google/agent-platform-eval-flywheel/)
Not your listing, or something out of date? Claim or update your listing.