nvidia-cuda-q-cudaq-guide
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill implements a navigation system that uses the
$ARGUMENTSvariable to route users to specific documentation sections. This creates a surface for indirect prompt injection where user input influences the agent's flow. - Ingestion points: The
$ARGUMENTSvariable used in the routing table inSKILL.md. - Boundary markers: None present to separate user input from internal instructions.
- Capability inventory: The skill is authorized to use
Read,Glob,Grep, andBashtools. - Sanitization: No validation or sanitization is performed on the arguments before the agent executes the routing logic.
- [EXTERNAL_DOWNLOADS]: The guide includes instructions for installing the
cudaqPython package via standard package managers and utilizing thebrevCLI for cloud-based development. These references point to legitimate services and repositories associated with the skill's primary function. - [COMMAND_EXECUTION]: The skill provides documentation for executing local setup commands, such as
pip installand running binary installers. These are routine administrative tasks for configuring a quantum-classical programming environment.
Audit Metadata