performance-profiling
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external performance data, logs, and traces which could contain malicious instructions. * Ingestion points: User-provided symptoms, traces, logs, and code paths are identified as primary inputs in SKILL.md and reference files. * Boundary markers: The skill does not define specific delimiters to isolate external data from core instructions. * Capability inventory: The agent is instructed to analyze project files and propose code fixes or measurement hooks. * Sanitization: No explicit sanitization or validation of the input data is described.
Audit Metadata