performance-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill describes the use of local project commands such as
pnpm runtimeperf-comparefor performance analysis. These commands are restricted to the project environment and do not involve untrusted inputs or network operations. - [INDIRECT_PROMPT_INJECTION]: The skill guides the agent to read local project files, including READMEs and benchmark scripts. This is a standard workflow for performance analysis within a repository and does not pose a security risk in this context. Ingestion points:
packages/effect/runtimeperf/README.md,packages/effect/typeperf/README.md, andbenchmark/scripts. Capability inventory: execution ofpnpmbased performance tools and the TypeScript compiler. Sanitization: Not applicable for instructional markdown.
Audit Metadata