qt-qml-profiler

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses cmake to build the user's project with profiling flags and executes qmlprofiler to gather performance data. These operations are core to the skill's purpose and are conducted locally.\n- [COMMAND_EXECUTION]: A bundled Python script (parse-qmlprofiler-trace.py) is executed to parse the XML-based .qtd trace files and generate a performance summary.\n- [PROMPT_INJECTION]: The Guardrails section explicitly instructs the agent to treat all ingested data (QML source and trace files) as technical material, mitigating potential indirect prompt injection attacks from malicious project files.\n- [EXTERNAL_DOWNLOADS]: No remote resources are downloaded or executed at runtime. All scripts and references are bundled within the skill.\n- [DATA_EXFILTRATION]: No network access is requested or used by the skill. All data processing and report generation occur on the local file system.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 03:55 PM