django-perf-review
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a legitimate developer tool designed for performance optimization. Analysis of the instructions and metadata revealed no malicious patterns, unauthorized data access, obfuscation, or persistence mechanisms.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection as it processes external source code. This risk is mitigated by the skill's restrictive focus on performance patterns and requirements for validation. 1. Ingestion points: Source code is ingested through the Read, Grep, and Glob tools. 2. Boundary markers: Instructions require tracing data flow and validating findings before reporting, although specific delimiters for external content are not defined. 3. Capability inventory: The skill allows the use of Bash and Task tools for research and validation within the codebase. 4. Sanitization: No explicit sanitization or filtering of instructions within ingested code comments is specified.
Audit Metadata