perf-optimize-workflow
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use or recommend
npx skills add FuDesign2008/open-skillsfor dependency management. This utilizes the Node.js package executor to install functional extensions from the author's registry.\n- [EXTERNAL_DOWNLOADS]: External dependencies and templates are fetched from the author's own infrastructure (FuDesign2008). These resources are documented as vendor-owned and are consistent with the skill's operational requirements.\n- [SAFE]: The workflow incorporates an 'Evidence Validity' framework that explicitly audits incoming data for artifacts, pollution, and mismatch issues. This serves as a robust logical filter when the skill ingests external performance profiles or logs, effectively managing the indirect prompt injection surface associated with data analysis tasks.\n- [SAFE]: The dynamic generation of project-specific skills (code-insightandcode-optimizer) is a core, transparent feature of the workflow designed to capture and evolve project-specific performance knowledge across campaigns.
Audit Metadata