qemu-qtest
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute build and test commands, including
meson test,make, andgit rev-parse. These actions are scoped to the local workspace and build directories. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the local development environment, creating a surface for indirect injection.
- Ingestion points: The agent reads QEMU source files (e.g.,
tests/qtest/*.c,libqtest.h), build artifacts, and diagnostic logs (testlog.txt) from the workspace. - Boundary markers: There are no explicit instructions to use delimiters or ignore embedded instructions when reading these files.
- Capability inventory: The skill possesses the capability to read/write files in the workspace and execute shell commands via the build system.
- Sanitization: The instructions do not specify sanitization or validation of the content read from the workspace before it is processed by the agent.
Audit Metadata