qe-sparc-methodology
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The methodology processes untrusted inputs through various agent modes, creating a potential surface for indirect prompt injection.\n
- Ingestion points: User-provided
task_descriptionstrings and external content retrieved by theresearchermode in SKILL.md.\n - Boundary markers: No explicit instruction delimiters or containment markers are defined for the input data in the described workflows.\n
- Capability inventory: The framework includes the
codermode for file modification,researcherfor network access, andorchestratorfor agent delegation as described in SKILL.md.\n - Sanitization: The methodology does not specify validation or sanitization routines for external data or task descriptions before they influence agent behavior.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes the
npxutility to download and execute theclaude-flowpackage from the NPM registry.\n- [REMOTE_CODE_EXECUTION]: Thenpxcommand is used to fetch and run theclaude-flowpackage from the official NPM registry.\n- [COMMAND_EXECUTION]: The skill methodology involves executing CLI commands to run modes, manage swarms, and trigger hooks.\n- [DYNAMIC_EXECUTION]: The framework dynamically spawns specialized agents and orchestrates multi-agent swarms based on task requirements and optimized topologies.
Audit Metadata