z-qa-performance
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation guide for load testing and does not contain executable malicious payloads, obfuscation, or unauthorized commands. All external references point to well-known documentation from Grafana.- [CREDENTIALS_UNSAFE]: The skill includes positive security guidance by explicitly instructing users to keep credentials out of CLI arguments and to use existing secret mechanisms.- [INDIRECT_PROMPT_INJECTION]: The provided example script ingests data from a network response (
res.json('status')) to verify service health. This is a standard testing pattern with appropriate error handling (try-catch) and does not present an exploitable surface in this context.
Audit Metadata