qt-qml-review
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute local commands including
python3,git diff, andqmllint. These operations are essential for its stated purpose of linting and reviewing code changes within the user's project. - [SAFE]: The bundled Python script (
qt_qml_lint.py) was audited and found to use only standard libraries (json,re,sys,pathlib). It performs read-only analysis of project files and does not engage in network communication, file modification, or suspicious sub-process spawning. - [DATA_EXFILTRATION]: No exfiltration patterns were detected. The skill operates exclusively on the local filesystem and does not attempt to transmit code or analysis results to external domains.
- [PROMPT_INJECTION]: No evidence of prompt injection or attempts to bypass agent safety guidelines were found. The instructions are focused on technical code review and follow structural best practices.
Audit Metadata