qiskit
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/check_environment.pyusesimportlib.import_module()to programmatically verify the availability of quantum computing libraries. The module names are retrieved from a hardcoded internal map, preventing arbitrary code loading from user input. - [INDIRECT_PROMPT_INJECTION]: The skill describes functionality for importing quantum circuits via QPY and OpenQASM formats in
references/circuits.md. It mitigates risks by explicitly instructing users to treat external inputs as untrusted and avoid using unsafe deserialization methods like Python'spicklefor external data. - [SAFE]: The skill demonstrates safe credential handling by recommending the use of environment variables for IBM Quantum API keys and advising against committing sensitive configuration files like
qiskit-ibm.jsonto version control.
Audit Metadata