performance-profiling

Pass

Audited by Gen Agent Trust Hub on Mar 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/lighthouse_audit.py executes the lighthouse CLI tool using the subprocess.run method. It passes arguments as a list with the shell parameter disabled (the default in this context), which prevents shell injection by ensuring the URL input is treated strictly as an argument.
  • [EXTERNAL_DOWNLOADS]: The skill references the lighthouse CLI as an external dependency. It recommends manual installation from the official NPM registry, which is a well-known and trusted package repository. No automated or unverified downloads occur at runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 10, 2026, 01:14 AM