agent-performance-optimizer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill uses the
mcp__flow-nexus__sandbox_executetool to run Python code generated at runtime. Although the provided examples follow a set template for monitoring performance, this capability allows the agent to execute arbitrary scripts within the sandbox environment. - [COMMAND_EXECUTION]: The Python scripts executed via the sandbox utility leverage the
psutillibrary to collect sensitive system information, including CPU load, virtual memory usage, disk I/O counters, and network interface statistics. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external
performanceData,systemMetrics, andsystemTopology. - Ingestion points: System metrics and performance data are ingested through tools like
mcp__sublinear-time-solver__analyzeMatrixand the Python monitoring script. - Boundary markers: No specific delimiters or instructions to ignore embedded commands within the ingested data are present in the examples.
- Capability inventory: The skill possesses the ability to execute code via
mcp__flow-nexus__sandbox_executeand solve optimization problems usingmcp__sublinear-time-solver__solve. - Sanitization: No explicit sanitization or validation logic is shown for the data passed into the optimization or execution tools.
Audit Metadata