webperf-resources
Fail
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONOBFUSCATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation in SKILL.md refers users to an external CLI tool at 'webperf-snippets.net/CLI' and suggests installing 'webperf-snippets' and 'playwright' from the npm registry. These resources are either well-known service dependencies or owned by the skill's author ('nucliweb') and are used for the primary purpose of the skill.
- [OBFUSCATION]: The JavaScript snippet 'Network-Bandwidth-Connection-Quality.js' is minified. While minification is a common practice for delivering web assets, it is technically a form of code obfuscation. Manual review of the script confirms it is benign and limited to reading network metrics from the 'navigator.connection' browser API.
- [COMMAND_EXECUTION]: The documentation provides instructions for running CLI commands using 'npx webperf-snippets'. These commands are intended to allow users to run performance audits in a standalone environment outside of the AI agent platform.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata