skills/jeremylongshore/claude-code-plugins-plus-skills/detecting-performance-bottlenecks/Gen Agent Trust Hub
detecting-performance-bottlenecks
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized network activity were detected. The skill functions as a directory statistics tool to identify large or empty files.
- [COMMAND_EXECUTION]: The skill provides Python-based scripts (with .sh extensions) that perform directory traversal and generate statistics reports. These scripts include a feature to write results to a local file path, which is a standard functional capability for this tool type and performed using the built-in pathlib library.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface through the ingestion of file system metadata.
- Ingestion points: Filenames and metadata from the target directory analyzed by scripts in the
scripts/folder. - Boundary markers: Not present in the provided instructions or script logic.
- Capability inventory:
Bash(cmd:*)tool access and local file system write capabilities. - Sanitization: The scripts do not perform sanitization or validation of filenames or paths before including them in the generated reports.
Audit Metadata