jvm-desktop-memory-footprint
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell commands for Linux and macOS to inspect process status and JVM performance. It uses standard utilities such as
pgrep,grep,jcmd,ps, andvmmapto retrieve memory metrics like Resident Set Size (RSS) and heap information. - [DYNAMIC_EXECUTION]: A shell snippet for Linux includes a
python3 -cone-liner to calculate memory alignment. The command processes memory addresses extracted from/proc/mapsto identify memory arenas. The calculation logic is fixed and mathematical, involving no untrusted external inputs. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data by reading from system files like
/proc/$pid/statusand/proc/$pid/maps. These files are kernel-generated, and the skill's instructions involve specific parsing (viaawk) that limits the data processed to expected hexadecimal addresses, minimizing risk.
Audit Metadata