skills/nvlabs/skill2env/alterlab-qca/Gen Agent Trust Hub

alterlab-qca

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses Rscript via the Read Bash tool to execute R code for statistical analysis. This is documented as the intended primary purpose of the skill due to the lack of maintained Python libraries for QCA. The R scripts provided in the references are benign and focused solely on data calibration and Boolean minimization.
  • [REMOTE_CODE_EXECUTION]: The skill mentions external R packages (QCA, SetMethods) but provides standard installation instructions (install.packages('QCA')) rather than automated runtime installation from untrusted sources.
  • [DATA_EXPOSURE]: The skill processes CSV data files locally through R scripts. There are no network operations, hardcoded credentials, or attempts to access sensitive system paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 02:40 PM