nvidia-cuda-q-cudaq-guide

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: The skill implements a navigation system that uses the $ARGUMENTS variable to route users to specific documentation sections. This creates a surface for indirect prompt injection where user input influences the agent's flow.
  • Ingestion points: The $ARGUMENTS variable used in the routing table in SKILL.md.
  • Boundary markers: None present to separate user input from internal instructions.
  • Capability inventory: The skill is authorized to use Read, Glob, Grep, and Bash tools.
  • Sanitization: No validation or sanitization is performed on the arguments before the agent executes the routing logic.
  • [EXTERNAL_DOWNLOADS]: The guide includes instructions for installing the cudaq Python package via standard package managers and utilizing the brev CLI for cloud-based development. These references point to legitimate services and repositories associated with the skill's primary function.
  • [COMMAND_EXECUTION]: The skill provides documentation for executing local setup commands, such as pip install and running binary installers. These are routine administrative tasks for configuring a quantum-classical programming environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 09:13 AM
Security Audit — agent-trust-hub — nvidia-cuda-q-cudaq-guide