qutip
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill documentation includes instructions to install 'qutip', 'qutip-qip', and 'qutip-qtrl' via 'uv pip'. These are legitimate scientific packages, though installation from external registries is a standard risk factor for AI agent skills.
- [COMMAND_EXECUTION] (LOW): The skill utilizes QuTiP's string-based Hamiltonian feature which involves runtime compilation (via Cython) for performance. This is a core library feature and is safe in this context.
- [SAFE] (LOW): Data persistence is handled via 'Result.save' and 'Result.load', which utilize Python's 'pickle' module. While standard for QuTiP, users should avoid loading simulation data from untrusted sources.
Audit Metadata