runtime-performance-auditor

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill is a specialized diagnostic tool for Flutter Staff Engineers. It uses local file system operations to audit runtime performance without performing network requests or accessing sensitive credentials.\n- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard grep commands against the project's lib/ directory. These commands are used to identify specific Dart patterns (e.g., jsonDecode, .sort()) and do not involve the execution of untrusted external scripts or binaries.\n- [PROMPT_INJECTION]: The skill creates an inherent surface for indirect prompt injection because it reads and analyzes untrusted developer-provided source code. This is an expected characteristic for code-auditing tools. Evidence: (1) Ingestion points: Dart source files in lib/ and the pubspec.yaml file. (2) Boundary markers: None present. (3) Capability inventory: File system read access and local grep execution. (4) Sanitization: None performed on the source code scanned by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 10:44 PM