qe-learning-optimization

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a custom command-line interface aqe to execute operations such as knowledge transfer, parameter tuning, and metric collection.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface due to the processing of external data sources. 1. Ingestion points: The skill reads from file patterns examples/**/*.ts, tests/**/*.test.ts, and feedback/*.json as defined in the pattern learning section of SKILL.md. 2. Boundary markers: The instructions lack explicit delimiters or guidance to ignore embedded instructions within the ingested files. 3. Capability inventory: The skill can execute command-line operations via aqe and perform cross-framework syntax mapping. 4. Sanitization: There is no documentation of input validation, escaping, or filtering of the content retrieved from external files.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 06:09 PM