web-performance-optimization
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and code snippets for improving web performance, including best practices like code splitting, image optimization, and compression. All referenced resources and packages are well-known industry standards.
- [INDIRECT_PROMPT_INJECTION]: The skill includes scripts for browser automation using Puppeteer and analytics tracking that process external data such as URLs and browser metrics. While these components ingest data from external sources, they represent a low risk of instruction injection because the logic is focused on extracting technical performance metrics and does not feed the retrieved content back into the agent's reasoning engine as instructions.
- Ingestion points: The
measurePerformanceandmeasurePagePerformancefunctions in the reference files accept a target URL to visit and analyze. - Boundary markers: None present in the code snippets.
- Capability inventory: The skill utilizes network requests via
fetchand browser automation viapuppeteer. - Sanitization: Not present; however, the provided scripts only process performance timing and resource metrics.
Audit Metadata