qemu-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a utility script
scripts/gates.shthat automates workspace validation tasks. It executes standard development commands includinggit status,git rev-parse, andsha256sum. It also facilitates the execution of the official QEMUcheckpatch.pltool via Perl. These operations are transparently implemented and scoped strictly to the local development environment. - [INDIRECT_PROMPT_INJECTION]: The workflow involves ingesting and analyzing external data such as build logs, guest serial output, and prior session transcripts. The skill includes specific mitigation instructions in
references/evidence-mining.md, requiring the agent to sanitize private data, separate observation from inference, and verify all claims against the checked-out source code before recording them in the audit record. - [DATA_EXPOSURE]: The skill manages workspace metadata and environment paths. It includes a specialized
source-commentsgate withinscripts/gates.shthat uses complex parsing to detect and warn if local audit directories, home paths, or private task metadata are accidentally included in source code comments, actively preventing data leakage.
Audit Metadata