performance-profiling
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security risks were identified. The skill focuses on performance measurement and analysis using standard practices.
- [COMMAND_EXECUTION]: The script
scripts/lighthouse_audit.pyexecutes thelighthouseCLI tool usingsubprocess.runwith a list of arguments. This implementation follows security best practices by avoidingshell=True, which prevents shell injection vulnerabilities when handling the user-provided URL. - [EXTERNAL_DOWNLOADS]: The skill identifies a dependency on the
lighthousenpm package. As this is a well-known, industry-standard tool from a trusted service provider (Google), this reference is considered safe.
Audit Metadata