qt-runtime-eval
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides the
qt-ai-dev-toolsCLI which allows for executing arbitrary Python strings or scripts against a running Qt application. This is a core feature of the tool for runtime debugging and state inspection. - [REMOTE_CODE_EXECUTION]: The
qt-ai-dev-tools bridge injectcommand utilizes thesys.remote_execfunctionality (available in Python 3.14+) to inject code into a running process. While this is a high-privilege operation, it is documented here as a legitimate development utility for application state bridge access. - [SAFE]: No signs of prompt injection, data exfiltration to external domains, or obfuscation were detected. The skill's behavior is consistent with its stated purpose as a developer tool for Qt application runtime evaluation.
Audit Metadata