The Agent Skills Directory

[SAFE]: The skill provides legitimate engineering tools and documentation for performance profiling. All included scripts and code snippets follow standard development practices.
[DATA_EXPOSURE_EXFILTRATION]: The k6 load testing example in references/profiling-recipes.md contains a dummy credential (password: 'loadtest123'). This is identified as a benign placeholder for demonstration purposes and does not represent a sensitive data leak.
[INDIRECT_PROMPT_INJECTION]: The scripts/performance_profiler.py script reads project metadata files (package.json, requirements.txt, go.mod) to count dependencies.
Ingestion points: The script reads file contents from the target project directory provided by the user.
Boundary markers: None; the script processes files as raw text or JSON.
Capability inventory: The script performs local file system reads and directory traversal but does not execute external code or perform network operations.
Sanitization: The script uses standard Python libraries for file handling and error management, ensuring it only processes intended configuration files.

performance-profiler