review-performance
Pass
Audited by Gen Agent Trust Hub on Jul 5, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions utilize shell commands including
unilyze,jq, andgrep. These tools are used to parse JSON snapshots and search source code for specific Unity performance smells. The commands are scoped to the project directory. - [DATA_EXPOSURE]: The skill accesses the
.unity-review/directory within the local project to read input snapshots and write performance reports. It does not attempt to access credentials, SSH keys, or other sensitive system locations. - [EXTERNAL_DOWNLOADS]: The README documents installation via standard package managers (apm, npx). No runtime downloads or remote script executions (e.g., curl | bash) are performed during the skill's execution.
- [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms was found. The skill's behavior strictly aligns with its stated purpose of static performance analysis.
Audit Metadata