performance-optimization
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from observability platforms (Sentry) and application logs to identify performance bottlenecks.
- Ingestion points: Sentry transaction spans and application logs via logs-tool.
- Boundary markers: Instructions explicitly scope investigations to the current repository and observability project first.
- Capability inventory: The skill allows the agent to modify the codebase and execute operational tools (bun run db-tool, logs-tool, k8s-tool).
- Sanitization: Not explicitly stated, though the workflow requires validation through benchmarks and local profiling.
- [SAFE]: Operational commands including bun run logs-tool, db-tool, and k8s-tool are used strictly for gathering operational context such as timing patterns and resource throttling.
- [SAFE]: The provided code references for Drizzle ORM and the Effect library contain standard, safe implementation patterns for batching, joins, and parallel execution.
Audit Metadata