python-performance-optimization

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing well-known Python performance tools including line-profiler, memory-profiler, py-spy, and pytest-benchmark. These are standard packages from official registries used for legitimate development purposes.
  • [COMMAND_EXECUTION]: Provides numerous examples of utilizing system-level profiling tools via the command line, such as cProfile, kernprof, and py-spy. These commands are used to profile local scripts and running processes as part of performance tuning workflows.
  • [DATA_EXFILTRATION]: Contains code snippets demonstrating the use of the requests and aiohttp libraries for benchmarking network I/O. The examples target httpbin.org, a well-known service for testing HTTP requests, and do not involve the handling of sensitive credentials or private data.
  • [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze and transform user-provided Python code, which naturally exposes the agent to external data.
  • Ingestion points: The agent accepts Python source code from the user within the conversation for optimization and profiling.
  • Boundary markers: Absent; the instructions do not require specific delimiters or guardrail prompts for the analyzed code.
  • Capability inventory: The skill facilitates local file writes (dumping profile statistics), network operations (I/O benchmarking), and process spawning (multiprocessing).
  • Sanitization: Absent; the skill operates as a utility for code analysis and does not include logic for sanitizing instructions potentially embedded in user-supplied code blocks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 03:55 PM