performance-profiling
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/lighthouse_audit.pyexecutes thelighthousecommand-line utility to perform performance audits. - The implementation uses
subprocess.runwith a list of arguments, which prevents command injection by ensuring the input URL is treated as a single literal argument. - The script employs secure temporary file handling via
tempfile.NamedTemporaryFilefor report generation and ensures cleanup after the audit is complete. - The referenced tool is a well-known, trusted utility developed by Google for performance analysis.
Audit Metadata