performance-profiling

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/lighthouse_audit.py executes the external lighthouse CLI utility using subprocess.run. The command is constructed using a list of arguments rather than a raw string, which effectively prevents shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill's documentation and script comments reference the lighthouse package from the official npm registry as a required dependency for the audit functionality. This is a standard and well-known industry tool.
  • [SAFE_PRACTICE]: The script utilizes tempfile.NamedTemporaryFile for handling intermediate report data, ensuring that file operations are contained and temporary files are cleaned up after use.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 06:10 PM
Security Audit — agent-trust-hub — performance-profiling