performance
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of instructional documentation (SKILL.md), assessment criteria (ASSESSMENT.md), and quality assurance guidelines (QA.md). These files provide best practices for performance engineering, such as percentile analysis and instrumentation before optimization. No executable scripts, network requests, or sensitive file access patterns were found.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external performance data and code reviews. While these are untrusted ingestion points, the skill operates solely as a methodology guide for the agent and does not implement automated parsing or execution of external data. No exploitable capability surface exists within the skill itself.
- [REMOTE_CODE_EXECUTION]: References to external tools such as
clinic.jsandpg_stat_statementsare standard industry tools for performance profiling and database monitoring. They are mentioned as recommendations for human or agent use and are not automatically downloaded or executed by the skill.
Audit Metadata