quantum-error-correction

Warn

Audited by Gen Agent Trust Hub on Jul 8, 2026

Risk Level: MEDIUMPROMPT_INJECTIONNO_CODE
Full Analysis
  • [PROMPT_INJECTION]: Deceptive Metadata. The skill's name (quantum-error-correction) and description (Surface codes and quantum noise mitigation strategies) are inconsistent with the actual content of the reference files, which consists of repetitive, generic software engineering advice regarding circuit breakers, memory management, and eBPF.
  • [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The reference documents provide code implementations (e.g., the concurrent_fetch function in references/architecture-patterns.md and others) that ingest untrusted data and perform network operations without sanitization or boundary markers.
  • Ingestion points: The urls parameter in the concurrent_fetch implementation examples across multiple reference files.
  • Boundary markers: Absent from implementation snippets.
  • Capability inventory: Network GET requests via aiohttp in Python snippets and stream processing in Rust snippets.
  • Sanitization: No input validation, URL filtering, or escaping is present in the provided examples.
  • [NO_CODE]: This skill does not include any executable script files (e.g., .py, .sh). All logic is provided as markdown text or code blocks intended for documentation purposes.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 8, 2026, 12:26 PM
Security Audit — agent-trust-hub — quantum-error-correction