performance-testing
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines workflows that ingest external application data for analysis, which creates a potential surface for indirect prompt injection. 1. Ingestion points: The
testResultsobject in theAnalyze Bottleneckstask withinSKILL.md. 2. Boundary markers: No specific delimiters or instructions to ignore embedded content are provided in the task definitions. 3. Capability inventory: The skill orchestrates network-based load tests and coordinates multiple agents for result analysis and fleet management. 4. Sanitization: No data validation or sanitization logic for ingested test metrics is present in the skill body. - [EXTERNAL_DOWNLOADS]: The skill documentation includes an example GitHub Action configuration referencing
grafana/k6-action@v0.3.0. This is an official dependency from Grafana Labs, a well-known service for performance monitoring and testing.
Audit Metadata