python-performance-optimization
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze user-provided Python source code to identify performance bottlenecks. This creates a potential surface where malicious instructions embedded in the code's comments or strings could attempt to influence the agent's behavior during analysis.
- Ingestion points: User-provided Python scripts and application code analyzed according to the workflow in
SKILL.md. - Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the analyzed code.
- Capability inventory: The skill leverages profiling tools such as
cProfile,line_profiler,memory_profiler, andpy-spyto inspect and execute code logic. - Sanitization: No explicit sanitization or validation of the input source code is performed by the skill instructions.
- [EXTERNAL_DOWNLOADS]: The skill's implementation playbook suggests the installation of several well-known Python packages (e.g.,
numpy,aiohttp,py-spy) from standard package registries. These are documented for their primary purpose of performance optimization and originate from well-known sources.
Audit Metadata