golang-benchmark
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing several well-known tools from the Go ecosystem to assist with benchmarking and performance analysis.\n
- Fetches
benchstatfrom the official Go performance repository (golang.org/x/perf).\n - Recommends
benchdiff,cob, andgobenchdatafor CI integration and regression tracking.\n- [COMMAND_EXECUTION]: Instructs the use of standard Go toolchain commands for performance analysis.\n - Uses
go testwith profiling flags (-cpuprofile,-memprofile,-trace) to generate performance data.\n - Uses
go tool pprofandgo tool tracefor interactive analysis of generated profiles.\n- [PRIVILEGE_ESCALATION]: Provides instructions for tuning system performance on self-hosted CI runners to ensure benchmark reproducibility.\n - Includes commands using
sudoto modify the CPUscaling_governorand disable Turbo Boost.\n - This usage is accompanied by clear warnings that these commands should only be applied to dedicated, isolated CI hardware and never to shared or developer machines.\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies a workflow where benchmark results are read from local files for statistical comparison.\n
- Ingestion points: Tools like
benchstat,benchdiff, andgobenchdataingest text files (e.g.,old.txt,new.txt) containing benchmark output as described inbenchstat.mdandci-regression.md.\n - Boundary markers: None explicitly mentioned for separating benchmark data from instructional context during processing.\n
- Capability inventory: The skill instructions include full access to the Go toolchain (
go test,go tool pprof,go tool trace) and shell-based system tuning viasudo.\n - Sanitization: No specific sanitization or validation of the benchmark output format is detailed in the instructions.
Audit Metadata