perf-design
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The file
evals/run-static-checks.shis a shell script designed to verify the skill's structure and integrity. It executes a Python validator (check-skill-static.py) located in the parent repository's script directory. This is standard behavior for testing and maintaining skill quality within a development environment. - [DATA_EXFILTRATION]: The skill's
templates/optimize-plan.mdinstructions specify creating tracking artifacts indocs/audits/oraudit-artifacts/. These are local file-system writes intended for documenting optimization progress and do not involve unauthorized network transmission of sensitive data. - [PROMPT_INJECTION]: The skill implements robust boundary definitions and negative test cases (found in
evals/activation-cases.mdandevals/trigger-evals.json). These are designed to ensure the agent correctly routes tasks and refuses to handle out-of-scope requests, such as auditing live systems or refactoring unrelated code, which helps prevent accidental or adversarial behavior shifts. - [SAFE]: The skill follows a well-defined workflow, uses local grounding sources (inspired by established engineering literature), and maintains a clear separation between its design functions and other system-altering capabilities.
Audit Metadata