sillytavern-rolecard-performance

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses local Node.js scripts to perform performance auditing on JSON rolecards. All scripts rely solely on Node.js built-in modules (fs, crypto, path, url) and do not require external dependencies.
  • [SAFE]: Data privacy is maintained by the measurement script, which is designed to count metrics (such as string lengths, component frequency, and data-URI sizes) without including actual text content, scripts, or URLs in its output report. This effectively prevents sensitive data from being leaked through the reporting process.
  • [SAFE]: File system access is restricted to reading target rolecards and writing performance reports to user-specified paths. No arbitrary command execution, network exfiltration, or persistence mechanisms were detected.
  • [SAFE]: The instructional content and reference documentation provide clear guidance for performance optimization without attempting to bypass safety filters or override agent behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 01:00 PM