python-performance-optimization
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing well-known Python performance tools including
line-profiler,memory-profiler,py-spy, andpytest-benchmark. These are standard packages from official registries used for legitimate development purposes. - [COMMAND_EXECUTION]: Provides numerous examples of utilizing system-level profiling tools via the command line, such as
cProfile,kernprof, andpy-spy. These commands are used to profile local scripts and running processes as part of performance tuning workflows. - [DATA_EXFILTRATION]: Contains code snippets demonstrating the use of the
requestsandaiohttplibraries for benchmarking network I/O. The examples targethttpbin.org, a well-known service for testing HTTP requests, and do not involve the handling of sensitive credentials or private data. - [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze and transform user-provided Python code, which naturally exposes the agent to external data.
- Ingestion points: The agent accepts Python source code from the user within the conversation for optimization and profiling.
- Boundary markers: Absent; the instructions do not require specific delimiters or guardrail prompts for the analyzed code.
- Capability inventory: The skill facilitates local file writes (dumping profile statistics), network operations (I/O benchmarking), and process spawning (multiprocessing).
- Sanitization: Absent; the skill operates as a utility for code analysis and does not include logic for sanitizing instructions potentially embedded in user-supplied code blocks.
Audit Metadata