performance-engineer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard performance engineering workflows including algorithm optimization, database indexing, and API efficiency improvements.
- [COMMAND_EXECUTION]: The skill includes instructions for running standard profiling tools (e.g., node --prof, cProfile, go test -cpuprofile) and common curl commands for latency testing. These are documented as manual steps for the agent to perform during investigation.
- [NO_CODE]: The included Python scripts (scripts/perf_report.py and scripts/profile.py) are benign template generators that write static text structures to local files based on user arguments. They do not execute external commands or perform network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze application code and performance logs. While it lacks explicit boundary markers or sanitization for this data, the ingestion is central to its primary purpose and the capabilities provided (standard file operations and profiling) are consistent with the intended role. No malicious interpolation of untrusted data was found.
Audit Metadata