hotspot-optimizer
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/scan_hotspots.py) to perform static analysis on the codebase. This script is executed locally and does not perform any network operations or sensitive file access. - [REMOTE_CODE_EXECUTION]: The skill mentions subagent fan-out for large repositories, which involves spawning read-only subagents to analyze shards of the codebase. These subagents are tasked with finding hotspots and do not execute remote code.
- [DATA_EXFILTRATION]: No evidence of data exfiltration was found. The script and instructions focus entirely on local code analysis and optimization.
- [PROMPT_INJECTION]: The skill instructions do not contain any patterns designed to override agent behavior or bypass safety guidelines.
Audit Metadata