performance-profiling

Pass

Audited by Gen Agent Trust Hub on Mar 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security risks were identified. The skill focuses on performance measurement and analysis using standard practices.
  • [COMMAND_EXECUTION]: The script scripts/lighthouse_audit.py executes the lighthouse CLI tool using subprocess.run with a list of arguments. This implementation follows security best practices by avoiding shell=True, which prevents shell injection vulnerabilities when handling the user-provided URL.
  • [EXTERNAL_DOWNLOADS]: The skill identifies a dependency on the lighthouse npm package. As this is a well-known, industry-standard tool from a trusted service provider (Google), this reference is considered safe.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 16, 2026, 05:57 PM