performance-analysis

Pass

Audited by Gen Agent Trust Hub on May 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using npx claude-flow for core tasks such as performance reporting and bottleneck detection. These commands include a --fix flag which allows the tool to automatically apply performance optimizations.
  • [EXTERNAL_DOWNLOADS]: The use of npx implies the potential download and execution of the claude-flow package from the public npm registry, which is an expected and well-known service for Node.js package management.
  • [REMOTE_CODE_EXECUTION]: The documentation includes a JavaScript example (scripts/analyze-performance.js) that utilizes the Node.js child_process.exec module to programmatically trigger shell commands for CI/CD automation and custom analysis workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
May 10, 2026, 02:11 PM