runtime-performance-auditor
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill is a specialized diagnostic tool for Flutter Staff Engineers. It uses local file system operations to audit runtime performance without performing network requests or accessing sensitive credentials.\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard
grepcommands against the project'slib/directory. These commands are used to identify specific Dart patterns (e.g.,jsonDecode,.sort()) and do not involve the execution of untrusted external scripts or binaries.\n- [PROMPT_INJECTION]: The skill creates an inherent surface for indirect prompt injection because it reads and analyzes untrusted developer-provided source code. This is an expected characteristic for code-auditing tools. Evidence: (1) Ingestion points: Dart source files inlib/and thepubspec.yamlfile. (2) Boundary markers: None present. (3) Capability inventory: File system read access and local grep execution. (4) Sanitization: None performed on the source code scanned by the agent.
Audit Metadata