heaptrack

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill instructs the user to use sudo for installing heaptrack via system package managers (apt-get, dnf, pacman) in the installation section of SKILL.md.
  • [DYNAMIC_EXECUTION]: In references/heaptrack-analysis.md, the skill demonstrates the use of LD_PRELOAD to inject alternative memory allocators such as jemalloc and mimalloc into the execution environment to compare memory performance.
  • [COMMAND_EXECUTION]: The workflow involves various shell commands for compiling source code using cmake, running the profiler, and using heaptrack_print to generate summaries and flamegraphs.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to clone the heaptrack source code from the official KDE repository on GitHub for manual building.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes profiling data which represents an untrusted ingestion surface.
  • Ingestion points: Trace files (.zst) created by the profiler and subsequently analyzed by heaptrack_print as described in SKILL.md and the analysis reference.
  • Boundary markers: None identified for the profiler output processing.
  • Capability inventory: Execution of profiling tools, shell redirection for file creation, and library injection capabilities.
  • Sanitization: No specific sanitization logic is detailed for the generated profiling reports.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 01:50 AM