The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides instructions for system-level performance tuning on dedicated CI runners using sudo commands. It recommends modifying kernel parameters in /sys/devices/system/cpu/ to disable frequency scaling, Turbo Boost, and SMT (Hyper-Threading). These operations require elevated privileges and can impact the host system's stability and security if not strictly isolated to a controlled benchmark environment.- [COMMAND_EXECUTION]: The skill recommends using the cob tool for CI regression detection. The documentation explicitly warns that this tool executes git reset internally, which presents a risk of unintentional data loss for uncommitted changes in the user's working directory.- [EXTERNAL_DOWNLOADS]: The skill suggests installing several Go utilities from community-maintained repositories and personal domains, including filippo.io/mostly-harmless/benchdiff, github.com/knqyf263/cob, and go.bobheadxi.dev/gobenchdata. While these are tools from recognized community developers, they are hosted on individual repositories and personal domains outside the trusted vendor list, and the installations are performed without pinned versions using the @latest tag.- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface (Category 8) as it ingests untrusted data from external sources.\n
Ingestion points: Reads test fixtures in benchmarks (loadFixture), processes benchmark results from text files (benchstat bench.txt), and fetches diagnostic telemetry from remote Prometheus or pprof endpoints.\n
Boundary markers: Absent; there are no instructions to use delimiters or warnings to ignore embedded instructions within these data sources.\n
Capability inventory: The skill has access to powerful tools including Bash (go, git, curl, etc.), WebFetch, and file system Write operations.\n
Sanitization: Absent; the skill does not specify any filtering or validation for the content of the ingested files or network responses.- [PROMPT_INJECTION]: A metadata discrepancy exists between the declared author in the provided context ("marcioaltoe") and the identity used throughout the skill's metadata and resource URLs ("samber").

golang-benchmark