frontend-performance-optimization
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing well-known performance analysis tools from the official npm registry, including 'lighthouse', 'webpack-bundle-analyzer', 'rollup-plugin-visualizer', and '@next/bundle-analyzer'. These are industry-standard utilities for the stated purpose of the skill.- [COMMAND_EXECUTION]: The documentation includes example shell commands for users to run locally for performance auditing (Lighthouse CLI), image optimization (cwebp), and build-time analysis. These commands are intended for manual user execution to collect data and do not involve automated execution by the agent of untrusted scripts.- [DATA_EXFILTRATION]: The skill requires users to provide performance data, such as Lighthouse reports and bundle analyzer outputs. While these reports contain metadata about the project's structure, they are necessary for the skill to perform its primary function of diagnostics and optimization. No automated exfiltration to third-party domains was detected.- [PROMPT_INJECTION]: The skill ingests untrusted performance data which represents a surface for indirect prompt injection. However, since the skill does not have capabilities to perform dangerous actions (like writing files or executing system commands based on the data), the risk is negligible and inherent to the analytical nature of the skill.
Audit Metadata