qt-packaging

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides various commands for building and distributing applications. This includes instructions to use pip uninstall to resolve environment conflicts between system packages and virtual environments, and standard build commands for tools such as pyinstaller, briefcase, windeployqt, signtool, codesign, and notarization.
  • [EXTERNAL_DOWNLOADS]: The skill references official and well-known development resources, including GitHub Actions (actions/checkout, actions/upload-artifact) and the AppImageKit repository. It also references official DigiCert and Apple services for code signing and notarization workflows.
  • [INDIRECT_PROMPT_INJECTION]: As a build-focused skill, it possesses an inherent attack surface related to processing user-provided configuration and file paths. Ingestion points: User-defined paths in the skill body and configuration files like pyproject.toml or .spec files. Boundary markers: Absent; the skill operates directly on provided inputs. Capability inventory: Subprocess execution of packaging tools, platform compilers, and environment management utilities. Sanitization: Not present, as the skill assumes valid local inputs from the developer for the build process.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 08:00 PM