performance-profiling

Pass

Audited by Gen Agent Trust Hub on Nov 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/lighthouse_audit.py executes the lighthouse command-line utility to perform performance audits.
  • The implementation uses subprocess.run with a list of arguments, which prevents command injection by ensuring the input URL is treated as a single literal argument.
  • The script employs secure temporary file handling via tempfile.NamedTemporaryFile for report generation and ensures cleanup after the audit is complete.
  • The referenced tool is a well-known, trusted utility developed by Google for performance analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 10, 2026, 03:34 PM