js-performance-patterns

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns, subprocess calls, or unverified script downloads were detected. The skill references the well-known fastdom library on GitHub for DOM batching purposes, which is a standard development recommendation.
  • [DATA_EXFILTRATION]: No network operations, credential harvesting, or access to sensitive file paths (such as SSH keys or environment variables) were found.
  • [OBFUSCATION]: The content is clear and uses plain text. No Base64, zero-width characters, homoglyphs, or other hidden encoding techniques were identified.
  • [PROMPT_INJECTION]: The instructions are strictly limited to providing technical performance patterns. There are no attempts to override agent instructions, bypass safety filters, or extract system prompts.
  • [INDIRECT_PROMPT_INJECTION]: While the skill is designed to process user-provided code files (.js, .ts), it does not possess exploitable capabilities such as file writing, shell execution, or network access that could be abused through malicious data injection.
  • [DYNAMIC_EXECUTION]: The skill does not generate or execute code at runtime. It provides static code examples and guidelines for the agent to use during code review or optimization tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:44 PM