performance-profiling
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: Detailed analysis of the skill content and instructions confirms that the functionality aligns with the stated purpose of performance profiling with no evidence of malicious intent.
- [COMMAND_EXECUTION]: The script
scripts/lighthouse_audit.pyexecutes thelighthousecommand-line utility. The implementation uses thesubprocess.runmethod with an argument list rather than a shell string, which is a security best practice that prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill references the
lighthouseCLI tool, which is a well-known service provided by Google. The skill does not automate the installation of this dependency or download code from untrusted or unknown sources.
Audit Metadata