pgo
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation for standard compiler optimization techniques using well-known tools like GCC, Clang, and LLVM-BOLT. All shell commands provided are standard for developer build environments.
- [INDIRECT_PROMPT_INJECTION]: The skill documents a workflow that processes external workload data (e.g.,
workload.input) to generate profile information. - Ingestion points: External data files redirected to binaries via
< workload.input(SKILL.md, sections 2, 3, 4, 6). - Boundary markers: None; standard shell redirection is used.
- Capability inventory: Binary compilation (
gcc,clang), binary execution (./prog_instr), and profiling (perf,llvm-bolt). - Sanitization: None; the process relies on the developer providing representative and safe workload data. This is a standard operational characteristic of PGO workflows.
Audit Metadata