pennylane
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the official PennyLane library and its hardware plugins (e.g., qiskit, cirq, braket) via standard package managers. These are well-known scientific libraries.
- [DYNAMIC_EXECUTION]: Documentation mentions 'Catalyst', which uses Just-In-Time (JIT) compilation to optimize quantum circuits. This is a standard performance feature for the framework and does not incorporate untrusted external input into the compilation process.
- [INDIRECT_PROMPT_INJECTION]: The skill includes patterns for processing external data such as molecular structure files (.xyz) and training datasets. While these are entry points for external data, the skill uses them for numerical processing within established scientific libraries, presenting no significant risk to the agent context.
- [CREDENTIALS_SAFE]: Code examples for accessing quantum hardware utilize placeholders (e.g., 'YOUR_API_TOKEN', 'your_api_key') and correctly suggest using environment variables for sensitive configuration.
Audit Metadata