performance-profiling

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/lighthouse_audit.py invokes the lighthouse CLI using subprocess.run. It correctly passes arguments as a list rather than a shell string, effectively preventing shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill requires the lighthouse tool, a standard and reputable performance auditing utility from Google. The dependency is documented and appropriate for the skill's purpose.
  • [DATA_EXFILTRATION]: While the script performs network operations to audit user-provided URLs, it does not access or transmit sensitive local files or credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 06:49 AM
Security Audit — agent-trust-hub — performance-profiling