core-web-vitals
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides command-line examples that use
curlto fetch data from the Google PageSpeed Insights API, which is then piped to apython3script for parsing. The Python code is a static string literal defined within the skill itself, used solely to extract specific performance metrics from the JSON response. The data source (googleapis.com) is an official service from a trusted organization. - [COMMAND_EXECUTION]: Includes
curlandpython3command examples designed for developers to perform live performance audits of web pages. - [EXTERNAL_DOWNLOADS]: Fetches performance audit data from Google's official
runPagespeedAPI endpoint. These network requests are transparent, targeted at a well-known service, and necessary for the skill's primary purpose of diagnosing Core Web Vitals.
Audit Metadata