skills/sickn33/agentic-awesome-skills/application-performance-performance-optimization/Gen Agent Trust Hub
application-performance-performance-optimization
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface where malicious instructions could be embedded in user input and processed by subagents.
- Ingestion points: User input via
$ARGUMENTSis interpolated into instructions for subagents across all phases (Steps 1 through 13) in SKILL.md. - Boundary markers: No delimiters or "ignore embedded instructions" warnings are used when interpolating user data into prompts, which could lead the subagent to follow instructions contained within the variable.
- Capability inventory: The skill coordinates subagents with high-impact capabilities including memory profiling (heap dumps), database schema and index modification, backend code optimization, and CI/CD integration using tools like GitHub Actions.
- Sanitization: There is no evidence of sanitization or validation of the
$ARGUMENTScontent before it is processed by the agent tools.
Audit Metadata