benchmark-checklist

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill recommends the use of standard system diagnostic and profiling tools to identify performance bottlenecks. These include:
  • System monitoring: uptime, nproc, top, pidstat.
  • Profiling: node --cpu-prof, py-spy, perf.
  • Tracing: strace -c.
  • These tools are used for their intended purpose within the scope of performance measurement and analysis.
  • [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to process and analyze external data, such as benchmark results and measurement scripts, which presents a surface for indirect prompt injection.
  • Ingestion points: Performance measurement data and scripts provided by the user in the agent's context (SKILL.md).
  • Boundary markers: None explicitly defined in the skill instructions.
  • Capability inventory: The skill utilizes system diagnostic tools and profilers (uptime, nproc, top, pidstat, perf, strace).
  • Sanitization: No explicit sanitization or validation of the input benchmark data is mentioned, though the checklist approach encourages verification of the data's validity (e.g., checking for errors and reproducibility).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 04:32 PM