detecting-performance-bottlenecks

Warn

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides scripts that are deceptive regarding their actual functionality. While named for specific performance tasks (CPU, DB, I/O, and Memory), the scripts are identical copies of a generic file-system scanner with no performance profiling capabilities.\n
  • Evidence: Files scripts/analyze_cpu.sh, scripts/analyze_db.sh, scripts/analyze_io.sh, and scripts/analyze_memory.sh contain identical Python code that only performs directory traversal and file size calculation.\n
  • Evidence: SKILL.md claims the tool "analyzes cpu, memory, i/o, and database performance," which is a misleading characterization of the provided scripts.\n
  • Evidence: The scripts use a .sh file extension despite containing Python code, which can be misleading regarding the execution environment.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 7, 2026, 02:54 PM