linux-perf
Fail
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- COMMAND_EXECUTION (HIGH): The skill requires multiple
sudocommands to modify sensitive kernel parameters. - Evidence:
sudo sysctl -w kernel.perf_event_paranoid=1andecho 0 | sudo tee /proc/sys/kernel/kptr_restrictinSKILL.md. - EXTERNAL_DOWNLOADS (HIGH): The skill directs the user to download a repository from an unverified external source.
- Evidence:
git clone https://github.com/brendangregg/FlameGraphinSKILL.md. This repository is not on the pre-approved trusted source list. - REMOTE_CODE_EXECUTION (HIGH): The skill executes scripts immediately after downloading them from the external repository.
- Evidence: Execution of
./FlameGraph/stackcollapse-perf.pland./FlameGraph/flamegraph.plinSKILL.md. - PERSISTENCE MECHANISMS (HIGH): The skill provides instructions to make security-degrading kernel changes persistent across reboots.
- Evidence: Writing to
/etc/sysctl.d/99-perf.confusingsudo tee.
Recommendations
- AI detected serious security threats
Audit Metadata