optimize-performance
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
rails dbconsoleutility and executeEXPLAIN ANALYZESQL statements to profile database performance. This is standard developer functionality within the Rails environment. - [EXTERNAL_DOWNLOADS]: The skill recommends adding community-standard gems such as
bullet,rack-mini-profiler,memory_profiler, andstackprofto the application's Gemfile. It provides links to the official documentation and GitHub repositories for these tools, such as the flyerhzm/bullet and MiniProfiler/rack-mini-profiler projects. - [INDIRECT_PROMPT_INJECTION]: The skill involves the ingestion of application code, log output, and profiler results for analysis. While these ingestion points in SKILL.md and EXAMPLES.md represent an attack surface, the skill defines a strict seven-step output format that acts as a boundary to ensure the agent remains focused on the optimization task. Capabilities include executing SQL commands and shell utilities (specified in tools.md). No specific sanitization of input logs or code is mentioned.
- [DYNAMIC_EXECUTION]: The skill demonstrates the execution of dynamically generated SQL strings using
ActiveRecord::Base.connection.executefor query plan analysis. This is a common practice for performance tuning in Rails applications.
Audit Metadata