team-perf-opt
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bashtool across various roles (profiler, benchmarker, optimizer) to execute standard developer utilities. This includes running language-specific benchmark commands such ascargo bench,go test -bench, andmake bench, as well as performing build analysis and performance profiling. These operations are consistent with the skill's stated purpose of performance optimization. - [PROMPT_INJECTION]: The skill ingests local codebase files as part of its analysis phase. While processing untrusted data (source code) can pose an indirect prompt injection risk, the skill includes a multi-stage review process (via the 'reviewer' role) that acts as a mitigation by validating generated code changes before they are finalized.
- Ingestion points: Source code files are read by the profiler and optimizer roles (roles/profiler/role.md, roles/optimizer/role.md).
- Boundary markers: The skill does not explicitly use boundary delimiters for the ingested code content in its prompts.
- Capability inventory: The system has broad capabilities, including the ability to write and edit files (optimizer role) and execute shell commands (profiler and benchmarker roles).
- Sanitization: No automated sanitization of ingested code content was identified; however, the structured multi-agent review workflow provides a procedural layer of safety.
Audit Metadata