brendangregg-use-tsa
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a purely instructional guide for performance analysis, following industry-standard methodologies for debugging system bottlenecks.
- [COMMAND_EXECUTION]: Recommends the use of standard Linux diagnostic utilities, including
uptime,dmesg,vmstat,mpstat,pidstat,iostat,free,sar, andtop. These tools are used for read-only system telemetry and resource monitoring. - [PRIVILEGE_ESCALATION]: The documentation transparently mentions that certain advanced diagnostic features (such as eBPF-based tools or
perf) typically require root privileges or specific kernel configurations. This is provided for informational purposes and does not involve automated attempts to bypass security controls. - [INDIRECT_PROMPT_INJECTION]: The skill involves interpreting output from system commands (e.g.,
dmesglogs). While attacker-controlled log messages could theoretically serve as an injection vector, this is an inherent aspect of system administration tasks and is considered a low-risk surface in this context.
Audit Metadata