lynx-trace-record
Pass
Audited by Gen Agent Trust Hub on Apr 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the user or agent to execute a provided Node.js script (
trace_record.bundle.cjs) to perform various tracing operations. These commands are well-documented and consistent with the skill's stated purpose of performance analysis. - [DATA_EXFILTRATION]: The
readDatacommand in the provided script collects binary trace data from connected devices (via the Lynx devtool connector) and writes it to a local file (e.g.,./my-trace.pftrace). This is an intended and documented behavior for a performance tracing tool. - [DYNAMIC_EXECUTION]: The
trace_record.bundle.cjsfile is a Webpack-bundled JavaScript file. It uses standard Node.js modules and common bundling patterns, such as dynamic chunk loading, to organize its internal logic and dependencies.
Audit Metadata