qiskit
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a well-structured set of instructions and examples for using the Qiskit library. No malicious code, unauthorized network calls, or credential exfiltration attempts were found. All recommended installation steps utilize the standard
uvpackage manager and official PyPI packages. - [INDIRECT_PROMPT_INJECTION]: The skill involves the agent processing user-supplied problem descriptions to generate quantum circuits. While this provides a potential surface for indirect prompt injection, it is a core functional requirement of the skill and no exploitable chains for privilege escalation or data exfiltration were identified.
- [METADATA_POISONING]: The documentation mentions a non-existent package named 'Samplomatic' claiming high performance. While potentially misleading or an author error, it does not include an installation command or a link to an external source, limiting its risk to potential confusion rather than a supply chain attack.
Audit Metadata