hiram-performance

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses shell commands to manage the file system for report organization.
  • Evidence: The instruction mkdir -p ./audit-reports/{target-slug} in SKILL.md creates directories based on user-provided arguments.
  • Analysis: The skill proactively mitigates command injection risks by instructing the agent to convert the $ARGUMENTS into 'URL-safe folder names' before execution.
  • [DATA_EXPOSURE]: The skill writes detailed technical reports to the local file system.
  • Evidence: Reports are saved to paths such as ./audit-reports/{timestamp}/performance-assessment.md and planning-docs/{feature-slug}/17-performance-budget.md.
  • Analysis: This is the intended primary function of the skill (providing documentation and analysis) and does not involve exfiltration to external domains.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 03:58 PM