performance-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze external telemetry data, which constitutes a vulnerability surface for indirect prompt injection if an attacker can influence the contents of those logs or traces.
- Ingestion points:
references/database_query_performance.md(APM logs, DB slow logs) andreferences/profiling_diagnostics.md(Profiling artifacts, CPU/memory traces). - Boundary markers: The skill lacks instructions for using delimiters or boundary markers to isolate analyzed data from the agent's core instructions.
- Capability inventory: The skill guides the agent in performing database tuning (
references/database_query_performance.md) and managing CI performance gates that can fail release builds (references/regression_ci_reporting.md). - Sanitization: No sanitization or validation logic is specified for the external logs or performance artifacts processed by the agent.
Audit Metadata