performance-profiling

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is primarily educational, providing frameworks for analyzing Core Web Vitals, bundle sizes, and runtime performance.
  • [COMMAND_EXECUTION]: The script scripts/lighthouse_audit.py uses subprocess.run to execute the Google Lighthouse CLI. It correctly uses a list of arguments rather than a shell string, which mitigates shell injection risks. It also utilizes tempfile for secure temporary data handling and ensures cleanup of the report after processing.
  • [EXTERNAL_DOWNLOADS]: The skill requires the lighthouse CLI, a well-known open-source tool maintained by Google. The instructions appropriately advise the user to inspect the helper code and run audits only against authorized URLs.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 05:29 AM