qe-quality-assessment
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONTIME_DELAYED_CONDITIONAL
Full Analysis
- [COMMAND_EXECUTION]: The skill provides specific commands for the agent to run, including the
aqeCLI for quality assessments and anode -eone-liner to update a local history file. The Node.js command interacts directly with the file system using thefsmodule to read and writerun-history.json. - [DYNAMIC_EXECUTION]: The instructions direct the agent to execute a JavaScript snippet at runtime using
node -e. While this is intended for recording metrics, it represents a pattern of dynamic script execution provided within the skill's instructions. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves processing untrusted external data, such as source code in the
src/directory and test output. It does not employ boundary markers or sanitization to protect against malicious instructions embedded in that data. Furthermore, the agent's behavior is influenced by the contents of its ownrun-history.jsonfile. - Ingestion points: Source code files in
src/, test metrics, andrun-history.json(SKILL.md). - Boundary markers: Absent; no specific delimiters are defined to separate untrusted data from instructions.
- Capability inventory: Execution of shell commands (
aqe) and Node.js code with file system read/write access (SKILL.md). - Sanitization: None; the skill interpolates and processes external code and metadata directly.
- [TIME_DELAYED_CONDITIONAL]: The skill includes an instructional trigger that alters agent behavior (issuing an alert) based on historical state—specifically, if quality gates have failed in 3 of the last 5 recorded runs in
run-history.json.
Audit Metadata