codspeed-setup-harness
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a configuration schema hosted on GitHub at
https://raw.githubusercontent.com/CodSpeedHQ/codspeed/refs/heads/main/schemas/codspeed.schema.json. This is an official resource from the vendor's repository and is used for validating benchmarking configuration files. - [COMMAND_EXECUTION]: The skill provides standard package management commands (
npm install,pip install,cargo add) and tool-specific execution commands (codspeed run,cargo codspeed build) necessary for setting up and running performance tests. These are standard operations for the stated purpose of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes project structure and source code to identify hot paths and existing benchmarks. While it ingests untrusted local project data, it uses this information solely to suggest relevant benchmark templates and does not execute instructions found within the project files. The capability is limited to local file read and standard tool invocation.
Audit Metadata