performance-profiling
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily educational, providing frameworks for analyzing Core Web Vitals, bundle sizes, and runtime performance.
- [COMMAND_EXECUTION]: The script
scripts/lighthouse_audit.pyusessubprocess.runto execute the Google Lighthouse CLI. It correctly uses a list of arguments rather than a shell string, which mitigates shell injection risks. It also utilizestempfilefor secure temporary data handling and ensures cleanup of the report after processing. - [EXTERNAL_DOWNLOADS]: The skill requires the
lighthouseCLI, a well-known open-source tool maintained by Google. The instructions appropriately advise the user to inspect the helper code and run audits only against authorized URLs.
Audit Metadata