performance-profiler
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes external code provided by users, creating a surface where malicious instructions could be embedded in code comments or data.
- Ingestion points: Source code files and directories (e.g.,
src/,UserList.jsx) passed as arguments to the tool. - Boundary markers: The instructions lack explicit directives for the agent to ignore or delimit embedded instructions within the code being analyzed.
- Capability inventory: The skill utilizes the agent's file system access to read and analyze source code files.
- Sanitization: The skill does not define validation or sanitization rules for the ingested content.
Audit Metadata