performance-test

Pass

Audited by Gen Agent Trust Hub on Nov 5, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external data including telemetry, query plans, and test logs. Ingestion points: Reads tool-generated reports and runtime evidence (SKILL.md, verification.md). Boundary markers: Mandates isolated environments, synthetic datasets, and explicit user authorization (harness.md). Capability inventory: Includes shell command execution and file writing to tmp/reports/ (SKILL.md). Sanitization: Employs mandatory question tool checkpoints for authorization and recommends redaction of output artifacts (harness.md).- [EXTERNAL_DOWNLOADS]: The skill references official documentation and installation paths for performance testing tools like k6, Locust, and Gatling. All sources listed in references/sources.md point to official project domains or well-known technology organizations.- [COMMAND_EXECUTION]: The skill facilitates the generation and execution of project-specific shell commands for performance measurement. The process is protected by a strict requirement for explicit user consent before any action is taken and an explicit prohibition against the use of elevated privileges such as sudo.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 5, 2026, 06:43 PM