qiskit
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The utility script
scripts/check_environment.pyusesimportlib.import_module()to verify the installation of required quantum packages. This dynamic import is performed against a hardcoded list of verified library names and does not allow for arbitrary input-driven execution. - [CREDENTIALS_SAFE]: Documentation in
references/setup.mdandreferences/migration.mdexplicitly advises against hardcoding API keys. It promotes the use of environment variables and the SDK's native credential management, which stores tokens in a localized configuration file ($HOME/.qiskit/qiskit-ibm.json). - [EXTERNAL_DOWNLOADS]: The skill references official Qiskit ecosystem packages and provides installation instructions using standard package managers with specific, verified version pins.
- [DATA_EXPOSURE]: The
scripts/inspect_runtime.pyscript performs network-based queries to IBM Quantum services to retrieve backend capabilities. This script is designed for read-only inspection and does not exfiltrate sensitive user data or circuit information.
Audit Metadata