performance-rca
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
gcxCLI andgo tool pprofto perform performance analysis. These are legitimate tools used for their intended purpose within a performance investigation workflow. - [EXTERNAL_DOWNLOADS]: References and instructions point to the official Grafana GitHub repository for the
gcxtool and thedebug-with-grafanaskill. These are trusted vendor resources. - [INDIRECT_PROMPT_INJECTION]: The skill processes external profiling data (such as function names, metrics, and labels) which represents a theoretical ingestion point for untrusted data. However, the instructions focus on technical interpretation of structured tool output (JSON, DOT, pprof), and the capability inventory is limited to standard performance profiling operations.
- Ingestion points: Profiling data fetched via
gcx profiles queryand metrics metadata fromgcx profiles labelsinSKILL.md. - Boundary markers: None specified for the data ingestion.
- Capability inventory: Execution of
gcxandgo tool pprofcommands inSKILL.mdandreferences/advanced-analysis.md. - Sanitization: Data is processed through the
gcxandpproftools which parse the profiling data into structured formats.
Audit Metadata