qiskit

Pass

Audited by Gen Agent Trust Hub on Oct 1, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The script scripts/check_environment.py uses importlib.import_module() to programmatically verify the availability of quantum computing libraries. The module names are retrieved from a hardcoded internal map, preventing arbitrary code loading from user input.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes functionality for importing quantum circuits via QPY and OpenQASM formats in references/circuits.md. It mitigates risks by explicitly instructing users to treat external inputs as untrusted and avoid using unsafe deserialization methods like Python's pickle for external data.
  • [SAFE]: The skill demonstrates safe credential handling by recommending the use of environment variables for IBM Quantum API keys and advising against committing sensitive configuration files like qiskit-ibm.json to version control.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 1, 2026, 07:50 AM
Security Audit — agent-trust-hub — qiskit