alterlab-cirq
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides functionality to ingest and process external circuit definitions from QASM and JSON strings, which constitutes an attack surface for indirect prompt injection. \n
- Ingestion points:
references/building.mddocuments the use ofcirq.read_jsonandcirq.contrib.qasm_import.circuit_from_qasmfor importing circuit data. \n - Boundary markers: The instructions do not define specific delimiters or "ignore instructions" warnings for the agent when processing these external data inputs. \n
- Capability inventory: The skill has access to Python execution via the
Bashtool and performs local file writing for experiment data logging (references/experiments.md). \n - Sanitization: No explicit validation or filtering of the imported circuit definitions is implemented. \n- [EXTERNAL_DOWNLOADS]: The skill fetches resources and installs dependencies from well-known and official platforms. \n
- Installation instructions in
SKILL.mdtarget official packages includingcirq,cirq-google, andazure-quantum. \n - Documentation and resource links point to official Google Quantum AI domains and framework repositories on GitHub.
Audit Metadata