performance-scout
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection during codebase analysis.
- Ingestion points: The agent has full codebase read access via
read_file,grep, andcodebase_search(specified inSKILL.mdandagents/openai.yaml). - Boundary markers: The system prompt lacks delimiters or warnings to ignore instructions embedded in the analyzed data.
- Capability inventory: Authorized tools include
bashandpythonexecution. - Sanitization: Content from the codebase is not validated or filtered.
- [COMMAND_EXECUTION]: The skill utilizes shell-based tools for performance benchmarking.
- Authorized execution of
bash,python, and thehyperfineutility is documented for triage and analysis tasks. - [EXTERNAL_DOWNLOADS]: The skill accesses official Rust documentation.
- Connects to
doc.rust-lang.orgto retrieve performance-related guidelines, which is a well-known documentation service.
Audit Metadata