review-performance-change
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instruction files and does not contain any scripts, executables, or configuration files.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external code provided in the 'change scope', creating a surface for untrusted data to enter the agent context.
- Ingestion points: The skill processes a 'supplied change scope' as referenced in SKILL.md.
- Boundary markers: The instructions do not specify any delimiters (such as markdown code blocks or XML tags) to separate the untrusted code from the agent's instructions.
- Capability inventory: The skill is purely instructional and does not define any subprocess calls, file writing, or network operations.
- Sanitization: There are no instructions provided to sanitize, escape, or filter the external content before processing.
Audit Metadata