performance-optimization
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for running performance measurement tools in the shell, including Lighthouse and bundle size auditors (SKILL.md). These are standard development workflows used to measure application performance and enforce budgets in CI environments.- [EXTERNAL_DOWNLOADS]: The skill suggests using common Node.js packages such as
web-vitals,bundlesize, andlhcivia the official npm registry. These are well-known services and tools for the stated purpose and are documented neutrally without alarming language.- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing potentially untrusted performance data and requirements from users or monitoring systems (SKILL.md). - Ingestion points: Performance specifications and symptom descriptions provided in user queries or monitored metrics.
- Boundary markers: No explicit delimiters or warnings for embedded instructions are present.
- Capability inventory: No unsafe file-write, network exfiltration, or arbitrary command execution capabilities derived from processed data were identified.
- Sanitization: Not applicable as the skill primarily provides technical guidance and code templates rather than processing external content through a complex execution pipeline.
Audit Metadata