heaptrack
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill instructs the user to use
sudofor installing heaptrack via system package managers (apt-get,dnf,pacman) in the installation section of SKILL.md. - [DYNAMIC_EXECUTION]: In references/heaptrack-analysis.md, the skill demonstrates the use of
LD_PRELOADto inject alternative memory allocators such as jemalloc and mimalloc into the execution environment to compare memory performance. - [COMMAND_EXECUTION]: The workflow involves various shell commands for compiling source code using
cmake, running the profiler, and usingheaptrack_printto generate summaries and flamegraphs. - [EXTERNAL_DOWNLOADS]: The skill provides instructions to clone the heaptrack source code from the official KDE repository on GitHub for manual building.
- [INDIRECT_PROMPT_INJECTION]: The skill processes profiling data which represents an untrusted ingestion surface.
- Ingestion points: Trace files (
.zst) created by the profiler and subsequently analyzed byheaptrack_printas described in SKILL.md and the analysis reference. - Boundary markers: None identified for the profiler output processing.
- Capability inventory: Execution of profiling tools, shell redirection for file creation, and library injection capabilities.
- Sanitization: No specific sanitization logic is detailed for the generated profiling reports.
Audit Metadata