benchmark-checklist
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill recommends the use of standard system diagnostic and profiling tools to identify performance bottlenecks. These include:
- System monitoring:
uptime,nproc,top,pidstat. - Profiling:
node --cpu-prof,py-spy,perf. - Tracing:
strace -c. - These tools are used for their intended purpose within the scope of performance measurement and analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to process and analyze external data, such as benchmark results and measurement scripts, which presents a surface for indirect prompt injection.
- Ingestion points: Performance measurement data and scripts provided by the user in the agent's context (SKILL.md).
- Boundary markers: None explicitly defined in the skill instructions.
- Capability inventory: The skill utilizes system diagnostic tools and profilers (
uptime,nproc,top,pidstat,perf,strace). - Sanitization: No explicit sanitization or validation of the input benchmark data is mentioned, though the checklist approach encourages verification of the data's validity (e.g., checking for errors and reproducibility).
Audit Metadata