tracy-memory
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell commands to configure the environment and launch profiling utilities. Specifically, it uses
command -vto locate binaries likecapture,tracy-capture, andtracy-updatebefore executing them to collect and verify memory trace data. - [PRIVILEGE_ESCALATION]: The skill instructs the user to set the
LD_PRELOADenvironment variable to point toliballocwrapper.so. While this mechanism can be used for library injection, its use here is restricted to the memory profiling of the application as part of a legitimate developer workflow, pointing to a library typically managed by the Packman package manager in the user's cache directory.
Audit Metadata