qp-regress
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes
evidence.tsv(untrusted data generated from test runs) to generate reports and metrics. If the test output contains adversarial instructions, it could influence the agent's subsequent analysis or reporting behavior. - Ingestion points: The skill reads from
qp/run/<new-ts>/evidence.tsvas input for analysis. - Boundary markers: No specific delimiters or "ignore instructions" markers are defined for the interpolation of test data into the final report.
- Capability inventory: The skill uses
Bashto execute processing scripts (qp_tools.sh) andWriteto generatedelta.tsvandreport.md. - Sanitization: There is no evidence of sanitization or filtering of the content read from the evidence files before it is processed or reported.
- [COMMAND_EXECUTION]: The skill executes a local shell script
plugins/fh-qp/scripts/qp_tools.shusing theBashtool. This script is used to computesurface-reachmetrics from test data. This is a primary function of the skill and utilizes local project resources.
Audit Metadata