auditing-performance
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Instructs the agent to execute
npxcommands, such asnpx @next/bundle-analyzerandnpx vite-bundle-visualizer, to generate bundle analysis reports. - [EXTERNAL_DOWNLOADS]: Fetches performance auditing utilities from the npm registry. The
@next/bundle-analyzerpackage is an official tool from Vercel's Next.js framework. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes application source code and dependency manifests, which are external inputs.
- Ingestion points: Reads project files, dependency lists, and component code throughout the audit steps.
- Boundary markers: None present.
- Capability inventory: Execution of analysis tools via
npxas described in step 1. - Sanitization: None; relies on standard bundle analyzers to parse and report on code structure.
Audit Metadata