performance-analysis
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
npx claude-flowfor core tasks such as performance reporting and bottleneck detection. These commands include a--fixflag which allows the tool to automatically apply performance optimizations. - [EXTERNAL_DOWNLOADS]: The use of
npximplies the potential download and execution of theclaude-flowpackage from the public npm registry, which is an expected and well-known service for Node.js package management. - [REMOTE_CODE_EXECUTION]: The documentation includes a JavaScript example (
scripts/analyze-performance.js) that utilizes the Node.jschild_process.execmodule to programmatically trigger shell commands for CI/CD automation and custom analysis workflows.
Audit Metadata