performance-profiling
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/lighthouse_audit.pyinvokes thelighthouseCLI usingsubprocess.run. It correctly passes arguments as a list rather than a shell string, effectively preventing shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill requires the
lighthousetool, a standard and reputable performance auditing utility from Google. The dependency is documented and appropriate for the skill's purpose. - [DATA_EXFILTRATION]: While the script performs network operations to audit user-provided URLs, it does not access or transmit sensitive local files or credentials.
Audit Metadata