performance-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes npx to run the claude-flow tool, which triggers downloads from the npm registry if the package is not already present.\n- [COMMAND_EXECUTION]: Extensive documentation of CLI commands for monitoring, bottleneck detection, and auto-optimization using the claude-flow package.\n- [DYNAMIC_EXECUTION]: The provided JavaScript example script utilizes Node.js child_process.exec to run performance analysis commands programmatically.\n- [INDIRECT_PROMPT_INJECTION]: The skill evaluates data from swarm operations and task results to generate recommendations.\n
- Ingestion points: Swarm metrics and task results retrieved via claude-flow commands and MCP tools in SKILL.md.\n
- Boundary markers: Absent.\n
- Capability inventory: Local file writes (fs.writeFileSync) and command execution (child_process.exec) identified in the sample script in SKILL.md.\n
- Sanitization: Not demonstrated in the example script's processing logic.
Audit Metadata