qemu-tcg-backend-adaptation
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill instructions are limited to technical guidance for QEMU backend development tasks, such as instruction encoding, register allocation, and vector operation support. It relies on standard QEMU source tree structures and documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that involves ingesting untrusted data such as QEMU source code and TCG logs, which technically presents an indirect prompt injection surface. However, this is inherent to its primary purpose as a development aid.
- Ingestion points: Processes host-code logs, TCG dumps, and QEMU source files under
tcg/andinclude/tcg/. - Boundary markers: No explicit instruction delimiters or boundary markers are defined for the processed data.
- Capability inventory: The skill facilitates code analysis, modification, and execution of build and test commands (
qemu-build,tests/tcg). - Sanitization: There are no instructions for sanitizing or validating the contents of the ingested logs or source files before processing.
Audit Metadata