qt-qml-profiler
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
cmaketo build the user's project with profiling flags and executesqmlprofilerto gather performance data. These operations are core to the skill's purpose and are conducted locally.\n- [COMMAND_EXECUTION]: A bundled Python script (parse-qmlprofiler-trace.py) is executed to parse the XML-based.qtdtrace files and generate a performance summary.\n- [PROMPT_INJECTION]: TheGuardrailssection explicitly instructs the agent to treat all ingested data (QML source and trace files) as technical material, mitigating potential indirect prompt injection attacks from malicious project files.\n- [EXTERNAL_DOWNLOADS]: No remote resources are downloaded or executed at runtime. All scripts and references are bundled within the skill.\n- [DATA_EXFILTRATION]: No network access is requested or used by the skill. All data processing and report generation occur on the local file system.
Audit Metadata