performance-engineer
Audited by Socket on Mar 1, 2026
1 alert found:
AnomalyThis skill is a professional performance-engineering guide with code examples for profiling, caching, load testing, query optimization, bundle budgets, and memory monitoring. I found no indications of credential harvesting, obfuscated malware, remote-download-and-execute chains, or exfiltration to suspicious endpoints. The primary operational risks are (1) unbounded disk writes from profiling/heap snapshots saved to /tmp, (2) potentially destructive cache invalidation if pattern inputs are misused, and (3) the normal risk of running load tests against production systems using real AUTH_TOKENs. Those are practical/operational concerns rather than evidence of malicious intent. Overall the artifact appears benign for its stated purpose but contains a few operational patterns that require careful, privileged, and rate-limited use.