alterlab-qutip
Warn
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill documents the use of
qsaveandqloadfunctions inreferences/advanced.mdandreferences/time_evolution.md. These functions are built on Python'spicklemodule. Becausepicklecan execute arbitrary code during deserialization, loading untrusted.qufiles could lead to a system compromise. - [DYNAMIC_EXECUTION]: Documents the usage of string-based time-dependent Hamiltonians (e.g.,
'cos(w*t)') inSKILL.mdandreferences/time_evolution.md. QuTiP dynamically compiles these strings into executable code at runtime using Cython to optimize simulation performance. - [INDIRECT_PROMPT_INJECTION]: The skill ingests complex, user-defined mathematical models and simulation parameters.
- Ingestion points: User-provided Hamiltonian definitions, operator configurations, and initial state parameters used in Python simulation scripts (as seen in
SKILL.mdandreferences/time_evolution.md). - Boundary markers: There are no instructions to use delimiters or "ignore embedded instructions" warnings when processing user-supplied quantum system definitions.
- Capability inventory: The skill utilizes
Bash(python:*)for script execution andWritefor file management. - Sanitization: No sanitization or validation routines are specified for user-provided mathematical strings or parameters before they are incorporated into executable Python code.
Audit Metadata