performance-reviewer
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data in the form of codebase source files and execution context.
- Ingestion points: Source files, surrounding call paths, and large datasets specified in the workflow steps of
SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions embedded within the code being reviewed.
- Capability inventory: The skill relies on file system read access and the execution of existing local project tools (profiling, benchmark, or tracing commands).
- Sanitization: There are no explicit instructions for sanitizing or escaping the content of the source files before the agent processes them.
Audit Metadata