http-load-tester
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/http_benchmark.pyuses thesubprocessmodule to run external performance testing binaries (wrkorab). - Evidence: The functions
run_wrkandrun_abconstruct command lists which are passed tosubprocess.runto execute the load tests. - Risk Assessment: The script uses the list-based invocation method for
subprocess.runrather thanshell=True, which effectively prevents shell injection attacks. Furthermore, the script includes avalidate_urlfunction that ensures target URLs use only thehttporhttpsprotocols and contain valid hostnames. - [SAFE]: The skill performs its stated purpose of load testing and performance analysis. It does not contain any obfuscated code, unauthorized data exfiltration patterns, or attempts to gain persistence. The use of external tools is documented in the
SKILL.mdfile along with clear instructions for the user.
Audit Metadata