performance-profiling

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the async-profiler binary from its official GitHub repository release page using curl and extracts it. This is a standard installation method for this well-known JVM profiling tool.
  • [COMMAND_EXECUTION]: Provides commands to attach profilers to running processes using PIDs and uses sudo for the Linux perf tool to record system-wide CPU events, which is a required privilege for that specific utility.
  • [COMMAND_EXECUTION]: Includes package installation commands via pip and npm for established performance analysis utilities such as py-spy, snakeviz, memory-profiler, 0x, and memlab.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 10:28 AM
Security Audit — agent-trust-hub — performance-profiling