qt-runtime-eval

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides the qt-ai-dev-tools CLI which allows for executing arbitrary Python strings or scripts against a running Qt application. This is a core feature of the tool for runtime debugging and state inspection.
  • [REMOTE_CODE_EXECUTION]: The qt-ai-dev-tools bridge inject command utilizes the sys.remote_exec functionality (available in Python 3.14+) to inject code into a running process. While this is a high-privilege operation, it is documented here as a legitimate development utility for application state bridge access.
  • [SAFE]: No signs of prompt injection, data exfiltration to external domains, or obfuscation were detected. The skill's behavior is consistent with its stated purpose as a developer tool for Qt application runtime evaluation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 10:19 PM