linux-perf

Fail

Audited by Gen Agent Trust Hub on Feb 20, 2026

Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • COMMAND_EXECUTION (HIGH): The skill requires multiple sudo commands to modify sensitive kernel parameters.
  • Evidence: sudo sysctl -w kernel.perf_event_paranoid=1 and echo 0 | sudo tee /proc/sys/kernel/kptr_restrict in SKILL.md.
  • EXTERNAL_DOWNLOADS (HIGH): The skill directs the user to download a repository from an unverified external source.
  • Evidence: git clone https://github.com/brendangregg/FlameGraph in SKILL.md. This repository is not on the pre-approved trusted source list.
  • REMOTE_CODE_EXECUTION (HIGH): The skill executes scripts immediately after downloading them from the external repository.
  • Evidence: Execution of ./FlameGraph/stackcollapse-perf.pl and ./FlameGraph/flamegraph.pl in SKILL.md.
  • PERSISTENCE MECHANISMS (HIGH): The skill provides instructions to make security-degrading kernel changes persistent across reboots.
  • Evidence: Writing to /etc/sysctl.d/99-perf.conf using sudo tee.
Recommendations
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Feb 20, 2026, 03:23 PM