qt-devtools-setup
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
uvpackage manager and a specificqt-ai-dev-toolsCLI to perform workspace initialization, virtual machine provisioning, and application execution. - [PRIVILEGE_ESCALATION]: Instructions include using
sudofor service management (systemctl) and package installation (apt-get). It also details usingvirshto reconfigure host-level virtual networks to resolve DHCP conflicts. - [EXTERNAL_DOWNLOADS]: The skill initiates the installation of the
qt-ai-dev-toolspackage through standard Python package management tools (uv). - [INDIRECT_PROMPT_INJECTION]: The skill establishes an attack surface where the agent processes output from potentially untrusted applications running within the virtual machine.
- Ingestion points: UI widget trees and screenshots generated from applications inside the VM (SKILL.md).
- Boundary markers: None identified.
- Capability inventory: Virtual machine control (
vm up,vm run), file synchronization (vm sync), and host network modification (virsh) (SKILL.md). - Sanitization: None identified.
Audit Metadata