qemu-workflow

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a utility script scripts/gates.sh that automates workspace validation tasks. It executes standard development commands including git status, git rev-parse, and sha256sum. It also facilitates the execution of the official QEMU checkpatch.pl tool via Perl. These operations are transparently implemented and scoped strictly to the local development environment.
  • [INDIRECT_PROMPT_INJECTION]: The workflow involves ingesting and analyzing external data such as build logs, guest serial output, and prior session transcripts. The skill includes specific mitigation instructions in references/evidence-mining.md, requiring the agent to sanitize private data, separate observation from inference, and verify all claims against the checked-out source code before recording them in the audit record.
  • [DATA_EXPOSURE]: The skill manages workspace metadata and environment paths. It includes a specialized source-comments gate within scripts/gates.sh that uses complex parsing to detect and warn if local audit directories, home paths, or private task metadata are accidentally included in source code comments, actively preventing data leakage.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 02:39 AM