qiskit

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFE
Full Analysis
  • [DYNAMIC_EXECUTION]: The utility script scripts/check_environment.py uses importlib.import_module() to verify the installation of required quantum packages. This dynamic import is performed against a hardcoded list of verified library names and does not allow for arbitrary input-driven execution.
  • [CREDENTIALS_SAFE]: Documentation in references/setup.md and references/migration.md explicitly advises against hardcoding API keys. It promotes the use of environment variables and the SDK's native credential management, which stores tokens in a localized configuration file ($HOME/.qiskit/qiskit-ibm.json).
  • [EXTERNAL_DOWNLOADS]: The skill references official Qiskit ecosystem packages and provides installation instructions using standard package managers with specific, verified version pins.
  • [DATA_EXPOSURE]: The scripts/inspect_runtime.py script performs network-based queries to IBM Quantum services to retrieve backend capabilities. This script is designed for read-only inspection and does not exfiltrate sensitive user data or circuit information.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 02:07 AM