python-performance-optimization
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze local Python source files and project configuration data, which creates a potential surface for indirect prompt injection if those files contain adversarial content.
- Ingestion points: The skill monitors
**/*.py,**/pyproject.toml, and**/requirements.txtas specified inSKILL.md. - Boundary markers: There are no specific instructions or delimiters provided to the agent to treat the contents of these files as untrusted data or to ignore potential instructions embedded within them.
- Capability inventory: The instructions guide the agent to perform actions such as installing packages via
pip, executing profiling tools (kernprof,memory_profiler), and compiling extensions (Cython), providing a significant functional capability set. - Sanitization: The skill does not implement or suggest any sanitization, validation, or filtering of the code or configuration data before processing.
Audit Metadata