The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses several standard performance monitoring and benchmarking tools via shell commands, including npx autocannon, npx lighthouse, node --prof, py-spy, and npx clinic. These are routine developer operations for profiling and optimization.
[REMOTE_CODE_EXECUTION]: Uses npx to execute tools like autocannon and lighthouse. While npx fetches packages from the NPM registry, it is a standard development practice and targets well-known, widely-used performance utilities.
[DATA_EXPOSURE]: The skill documentation explicitly warns about the sensitivity of profiling payloads (heaps, stack traces) and mandates scrubbing PII/credentials, demonstrating high security awareness regarding diagnostic artifacts.
[THREAT_MITIGATION]: Includes explicit guardrails against destructive testing, such as cautioning against load-testing mutating endpoints in production and ensuring security boundaries are not sacrificed for performance gains.

performance-audit