performance
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily composed of reference documentation (.md files) providing guidance on React, Next.js, and web performance. These materials are educational and do not contain executable malicious code.
- [COMMAND_EXECUTION]: The file
scripts/bundle_analyzer.pyis a static analysis tool that reads local project files such aspackage.jsonand source code to provide optimization suggestions. It uses standard library modules (argparse,json,os,re,sys,pathlib) and performs only read-only operations on the project directory. It does not perform network requests or execute arbitrary commands. - [EXTERNAL_DOWNLOADS]: The
SKILL.mdfile references fallback commands for installing external skills (e.g.,python scripts/install-external-skills.py --skill userinterface-wiki). These are standard patterns for the platform's skill-chaining ecosystem and are documented for user information rather than silent execution.
Audit Metadata