quantum-circuit-builder-with-proof
Warn
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill enables the execution of user-provided Lean 4 source code through actions such as certify_from_lean, export_provider_programs, and execute_locally. Documentation states that this Lean code runs in a shared service container with access to the filesystem and network, and specifically cautions that the environment does not provide isolation for untrusted code.
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured and complex user-supplied data, such as Lean proof scripts and quantum circuit IR, which acts as a vector for indirect prompt injection. 1. Ingestion points: User-provided lean_source, circuit IR definitions, and provider-specific Python source code. 2. Boundary markers: None identified for distinguishing or isolating instructions within the processed data. 3. Capability inventory: Significant capabilities including remote code execution via the Lean kernel and file management operations. 4. Sanitization: Relies on a bounded grammar for parsing Python circuit definitions but lacks evidence of comprehensive sanitization for the Lean source or IR data.
Audit Metadata