Security audit
Security checks for vulnerabilities and agentic risk
This skill is a coherent UnifiedQuantum helper, with expected installation, local configuration, and cloud-submission guidance.
Install only if you use UnifiedQuantum or uniqc workflows. Treat cloud backend token setup and real hardware submissions as sensitive actions: enter real tokens carefully, confirm the selected backend and cost/quota impact, and prefer isolated Python environments for installs.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
git clone https://github.com/IAI-USTC-Quantum/quantum-computing.skill.git
mkdir -p ~/.Agents/skills
ln -s /path/to/quantum-computing.skill ~/.Agents/skills/quantum-computing
The skill describes actions that involve reading local environment state, potentially writing configuration or project files, and using networked/cloud backends, but it declares no explicit tool/permission scope. In an agent framework, that mismatch can cause overbroad authority to be assumed or inherited, increasing the chance of unintended file access, modification, or remote submission without clear guardrails.
The instruction on L009 is written as a direct behavioral requirement in Chinese and sets the interaction language implicitly, but the skill does not indicate that language choice is optional or limited to a China-specific compliance context. This creates a natural-language locale policy issue because it may force a specific language without user opt-in.
The guide shows uniqc config set originq.token YOUR_TOKEN directly on the command line without warning that shell history, process listings, terminal logging, or shared session tools may capture the token. In a CLI reference for cloud submission workflows, this can lead to credential exposure and unauthorized use of the user's quantum service account.
This markdown file contains user-facing instructions exclusively in Chinese, and there is no indication that Chinese is an optional or justified locale constraint. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
可通过多 profile 管理不同环境：
uniqc config profile create dev
uniqc config profile use dev
uniqc config profile list
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
可通过多 profile 管理不同环境:
uniqc config profile create dev
uniqc config profile use dev
uniqc config profile list
The entire troubleshooting reference is written only in Chinese, with no indication that another language is available or that the user can choose a preferred locale. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.
The file presents all guidance and examples in Chinese and does not indicate that users may choose another language or that the skill is intentionally restricted to a Chinese-speaking context. This can violate a language/locale policy when users have not explicitly opted into that locale.
The user-facing documentation is entirely in Chinese, including installation and usage guidance, with no indication that other languages are supported or that the language is intentionally region-specific. This can violate language/locale policy where skills should not force a specific language without user opt-in.
该 markdown 文件全文以中文呈现，标题“线路构建参考”直接表明技能内容默认且仅以特定语言提供，但文档中未说明这是面向特定中文用户群的区域化版本，也未提供用户可选择其他语言的提示。根据规则，未获用户选择即强制单一语言属于自然语言层面的政策风险。
The entire skill document is written in Chinese, beginning with the title at L001, and there is no indication that users may choose another language or that the locale restriction is intentional. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation.
该技能文档从标题开始完全以中文呈现，未说明这是面向特定中文区域用户的限定文档，也未提供用户可选择的语言或本地化选项。按照语言/locale 政策，若无明确地域性理由或用户 opt-in，强制单一语言可能构成自然语言策略违规。
No suspicious patterns detected.