alterlab-qutip

Warn

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill documents the use of qsave and qload functions in references/advanced.md and references/time_evolution.md. These functions are built on Python's pickle module. Because pickle can execute arbitrary code during deserialization, loading untrusted .qu files could lead to a system compromise.
  • [DYNAMIC_EXECUTION]: Documents the usage of string-based time-dependent Hamiltonians (e.g., 'cos(w*t)') in SKILL.md and references/time_evolution.md. QuTiP dynamically compiles these strings into executable code at runtime using Cython to optimize simulation performance.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests complex, user-defined mathematical models and simulation parameters.
  • Ingestion points: User-provided Hamiltonian definitions, operator configurations, and initial state parameters used in Python simulation scripts (as seen in SKILL.md and references/time_evolution.md).
  • Boundary markers: There are no instructions to use delimiters or "ignore embedded instructions" warnings when processing user-supplied quantum system definitions.
  • Capability inventory: The skill utilizes Bash(python:*) for script execution and Write for file management.
  • Sanitization: No sanitization or validation routines are specified for user-provided mathematical strings or parameters before they are incorporated into executable Python code.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 25, 2026, 02:36 PM