python-performance
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of several standard performance-related Python packages from the public Python Package Index (PyPI).
- Evidence: Documentation in
modules/benchmarking-tools.mdandmodules/profiling-tools.mdsuggests usingpipto installpytest-benchmark,line-profiler,memory-profiler, andpy-spy. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and profile Python source code, which means it processes data that could potentially contain malicious instructions targeting the AI agent.
- Ingestion points: The skill targets files matching the
**/*.pypattern as defined inSKILL.md. - Boundary markers: There are no specific boundary markers or instructions within the skill's modules to ignore embedded instructions in the analyzed files.
- Capability inventory: The skill suggests manual command-line profiling (e.g.,
cProfile,py-spy) and code modification for optimization. - Sanitization: No sanitization of the input Python files is specified, which is typical for static analysis and profiling guidance.
Audit Metadata