flight-profiler-stack
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the flight_profiler CLI tool with a user-specified Process ID (PID) to capture stack snapshots. This is the primary intended function of the skill for diagnostic purposes.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests and processes strings directly from external process memory (such as function names, source code lines, and task metadata) which could contain malicious instructions.
- Ingestion points: Output from the flight_profiler command, specifically the content of thread stacks, async coroutine stacks, and source code excerpts captured from the target process.
- Boundary markers: Absent. No specific delimiters or "ignore instructions" warnings are used to wrap the process-generated data.
- Capability inventory: The skill captures snapshots; however, it is part of a larger toolset (including watch, trace, and perf commands) that allows for extensive process and file system interaction.
- Sanitization: Absent. The skill does not perform validation or filtering of the captured process data before it is interpreted by the agent.
Audit Metadata