performance

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEMETADATA_POISONING
Full Analysis
  • [METADATA_POISONING]: The skill exhibits inconsistent metadata across its files. While SKILL.md correctly describes the tool as focusing on Angular performance optimization, several support files—including assets/config.yaml, scripts/validate.py, references/GUIDE.md, and references/PATTERNS.md—incorrectly label the category as 'database'. This discrepancy is likely a templating error by the author and does not present a malicious threat to the execution environment.
  • [SAFE]: The Python validation script (scripts/validate.py) uses yaml.safe_load() for parsing configuration, preventing unsafe deserialization attacks. No evidence of command execution, network exfiltration, or hardcoded credentials was found in any of the skill files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 11:11 AM