macos-app-performance
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on executing various macOS system commands to gather performance metrics, such as
top,pgrep,sysctl,pmset, and thexcrun xctracesuite. These are standard diagnostic tools. - [PRIVILEGE_ESCALATION]: Use of
sudois required for specific tools likespindump,powermetrics, andtimerfiresto access system-wide performance counters or inspect processes. The skill explicitly documents these requirements in its reference files. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection.
- Ingestion points: Local project configuration files such as
package.jsonandPackage.swift, as well as output from profiling tools. - Boundary markers: No specific delimiters or "ignore" instructions are used to isolate these inputs in the final report.
- Capability inventory: The skill uses shell commands and diagnostic utilities to process and report data.
- Sanitization: No explicit sanitization or validation of the ingested strings (e.g., process names or package metadata) is performed.
Audit Metadata