perf-baseline-manager
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes performance requirements and baseline data from external files, which could potentially contain malicious instructions meant to influence agent behavior.
- Ingestion points: The skill reads instructions from
docs/perf-requirements.mdand processes versioned baseline JSON files. - Boundary markers: The instructions do not define delimiters or specific "ignore embedded instructions" warnings for the external data being processed.
- Capability inventory: The skill has file-writing capabilities to the
{state-dir}/perf/baselines/directory. - Sanitization: No sanitization, validation, or filtering of the ingested performance data is mentioned.
Audit Metadata