hotpath
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill follows security best practices by including explicit 'Authority and experiment safety' guidelines that instruct the agent to avoid publishing secrets, sensitive payloads, or internal URLs. It also warns against running potentially destructive profiling commands in production.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external performance data which constitutes an attack surface for indirect prompt injection.
- Ingestion points: The agent is directed to read output from profilers, APM traces, and query logs (defined in
references/measurement.md). - Boundary markers: No explicit delimiters are suggested for isolating performance data from instructions.
- Capability inventory: The agent has the capability to modify application source code (as specified in Step 4 of the workflow in
SKILL.md). - Sanitization: There are no instructions for sanitizing or validating the data ingested from performance tools before analysis.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and implementation source code from well-known services (PostgreSQL and Grafana/k6) for research purposes. These references are used to establish best practices and do not involve executing untrusted remote code.
Audit Metadata