core-web-vitals

Pass

Audited by Gen Agent Trust Hub on Jul 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill primarily provides educational reference material regarding web performance metrics (LCP, INP, CLS).
  • [COMMAND_EXECUTION]: The skill includes a Python script (scripts/visualize.py) that generates a local HTML report. It uses the standard library (argparse, json, webbrowser) and does not perform any network operations or sensitive file access.
  • [EXTERNAL_DOWNLOADS]: The skill documents the use of the web-vitals library and Lighthouse CLI, which are standard, well-known web development tools. It does not automate their installation in a malicious way.
  • [DATA_EXFILTRATION]: No patterns of data exfiltration were found. The provided JavaScript snippet for web-vitals demonstrates a standard analytics implementation using navigator.sendBeacon to a local /analytics endpoint.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 4, 2026, 02:08 PM
Security Audit — agent-trust-hub — core-web-vitals