qt-cmake-project
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for processing various technical files such as CMakeLists.txt, C++ sources, and QML files. It includes a dedicated guardrail section explicitly instructing the agent to treat all project inputs as technical data and never as directives, which mitigates potential injection risks from processed code.
- [EXTERNAL_DOWNLOADS]: The skill references official installation paths on the vendor's GitHub repository and guides the agent to fetch command documentation from the official Qt documentation domain (doc.qt.io). These references target well-known, trusted infrastructure relevant to the skill's primary purpose.
- [COMMAND_EXECUTION]: The documentation provides standard build instructions using legitimate tools like
qt-cmakeandninjafor developer workflows. These instructions are informative for the user and do not involve silent or high-risk command execution patterns.
Audit Metadata