performance-profiling
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/lighthouse_audit.pyexecutes the externallighthouseCLI utility usingsubprocess.run. The command is constructed using a list of arguments rather than a raw string, which effectively prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill's documentation and script comments reference the
lighthousepackage from the official npm registry as a required dependency for the audit functionality. This is a standard and well-known industry tool. - [SAFE_PRACTICE]: The script utilizes
tempfile.NamedTemporaryFilefor handling intermediate report data, ensuring that file operations are contained and temporary files are cleaned up after use.
Audit Metadata