golang-benchmark
Warn
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Recommends installing multiple third-party Go tools and integration components from community repositories that are not managed by well-known technology organizations.
- Recommends
go installforbenchdiff(filippo.io/mostly-harmless/benchdiff),cob(github.com/knqyf263/cob), andgobenchdata(go.bobheadxi.dev/gobenchdata) withinreferences/ci-regression.md. - Recommends
fgprof(github.com/felixge/fgprof) inreferences/tools.md. - Suggests the use of a third-party GitHub Action
bobheadxi/gobenchdata@v1inreferences/ci-regression.md. - Note: The skill also references the official
benchstattool fromgolang.org, which is a trusted source. - [COMMAND_EXECUTION]: Provides instructions for executing shell commands and performing sensitive system-level configurations.
- Includes
sudocommands inreferences/ci-regression.mdfor performance tuning on CI runners, such as modifying the CPU frequency scaling governor, disabling Turbo Boost, and controlling SMT (Hyper-Threading). - The skill provides appropriate security context by explicitly warning that these system-level modifications should only be applied to dedicated CI runners and not to developer workstations.
Audit Metadata