linux-perf-profiling
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation provides commands to be executed with administrative privileges using
sudofor system management and installation. - Evidence: Instructions include
sudo apt install sysstat,sudo dnf install sysstat,sudo systemctl enable --now sysstat, andsudo install-skills-bin linux-perf-profilingfound inSKILL.mdandreferences/profiling-tools.md. - [PRIVILEGE_ESCALATION]: The skill directs the user to modify sensitive kernel parameters that govern access to system performance events and kernel memory addresses.
- Evidence: Instructions include
sudo sysctl -w kernel.perf_event_paranoid=1and references to settingkernel.kptr_restrict=0to resolve kernel symbols for profiling. These changes lower the kernel's security posture to allow deeper introspection. - [EXTERNAL_DOWNLOADS]: The skill references downloading and installing software from external package repositories and source control platforms.
- Evidence: The skill uses
aptanddnfto install packages likesysstatandperf. It also includes instructions to clone a repository from GitHub:git clone https://github.com/brendangregg/FlameGraph. - [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves reading and interpreting output from system profiling tools, which constitutes an ingestion of untrusted data into the agent context.
- Evidence: Ingestion points: Command output from
vmstat,iostat,mpstat, andperf(SKILL.md). Boundary markers: Absent. Capability inventory: Ability to install packages, modify kernel settings, and execute system commands. Sanitization: None mentioned. - [NO_CODE]: The skill package references external scripts and test files that are not provided within the distributed file bundle.
- Evidence: References to
scripts/sk-perf-snapshot.shinSKILL.mdandtests/test_kaizen_contracts.pyinreferences/agent-runtime-experiments.md.
Audit Metadata