performance-oracle
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [Prompt Injection] (SAFE): No patterns of instruction override, bypass markers, or jailbreak attempts were found. The role-play is strictly limited to performance optimization expertise.
- [Data Exposure & Exfiltration] (SAFE): The file contains no hardcoded credentials, sensitive file paths, or network-capable commands like curl or wget.
- [Remote Code Execution] (SAFE): There are no scripts, package installations, or remote execution patterns.
- [Indirect Prompt Injection] (SAFE): While the skill is designed to ingest and analyze external code, it lacks the necessary tool-use capabilities (such as file writing or command execution) to act upon malicious instructions embedded in that data.
- [No Code] (SAFE): The skill consists entirely of natural language instructions and metadata, with no accompanying scripts or binaries.
Audit Metadata