perf-profiling
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's core functionality involves identifying and executing shell commands (scripts) defined within the repository's package.json file. This means the agent executes code that is controlled by the contents of the workspace.- [PROMPT_INJECTION]: The skill processes untrusted data from the repository, including script names in package.json, configuration files, and project documentation, which could be used for indirect prompt injection attacks.
- Ingestion points: package.json, next.config., lighthouserc., size-limit., .size-limit., bundlesize., webpack.config., and files in docs/.
- Boundary markers: No explicit delimiters or boundary markers are defined to isolate external data from the agent's instructions.
- Capability inventory: The skill is capable of executing shell commands through the project's package manager (e.g., pnpm run).
- Sanitization: No sanitization or validation logic is specified for the data ingested from the repository files.
Audit Metadata