python-performance

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends the installation of several standard performance-related Python packages from the public Python Package Index (PyPI).
  • Evidence: Documentation in modules/benchmarking-tools.md and modules/profiling-tools.md suggests using pip to install pytest-benchmark, line-profiler, memory-profiler, and py-spy.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and profile Python source code, which means it processes data that could potentially contain malicious instructions targeting the AI agent.
  • Ingestion points: The skill targets files matching the **/*.py pattern as defined in SKILL.md.
  • Boundary markers: There are no specific boundary markers or instructions within the skill's modules to ignore embedded instructions in the analyzed files.
  • Capability inventory: The skill suggests manual command-line profiling (e.g., cProfile, py-spy) and code modification for optimization.
  • Sanitization: No sanitization of the input Python files is specified, which is typical for static analysis and profiling guidance.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:05 AM
Security Audit — agent-trust-hub — python-performance