ln-31-performance-optimizer
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires executing various development and profiling tools within the project environment.
- Evidence: The workflow utilizes git for state management and executes project-specific benchmarks, load tests, and system profilers.
- Context: These operations are standard for performance engineering tasks and are scoped to the local repository.
- [PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it processes untrusted data from multiple sources.
- Ingestion points: The agent reads local repository files, instructions, code comments, and external documentation or release notes.
- Boundary markers: The skill does not define clear delimiters to separate external content from its primary instruction set.
- Capability inventory: The agent possesses capabilities to execute shell commands (for benchmarks and tests) and manage the repository via git.
- Sanitization: There are no explicit requirements for sanitizing or validating content retrieved from external documentation or the local code base before it is processed.
Audit Metadata