performance-engineering
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill demonstrates responsible security practices by explicitly warning users that heap snapshots (generated via
v8.writeHeapSnapshot()) may contain sensitive data and must not be exposed to unauthorized access. - [COMMAND_EXECUTION]: The skill provides numerous examples of legitimate shell commands for CPU and memory profiling using industry-standard tools like Node.js built-ins,
0x, andclinic.jsto assist the user with performance analysis. - [COMMAND_EXECUTION]: Upon activation, the skill performs a localized directory listing (
ls) to detect installed companion skills within platform-specific directories, enabling it to provide relevant recommendations based on the user's current environment. - [EXTERNAL_DOWNLOADS]: The documentation references and suggests the use of well-known libraries and utilities from the official NPM registry, such as
benchmark,web-vitals,dataloader, andlighthouse, which are standard for software performance engineering tasks.
Audit Metadata