speed-monitoring
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates Real User Monitoring (RUM) by collecting browser telemetry data such as User Agent and Page URL.
- Ingestion points: Telemetry data is ingested via the '/api/vitals' endpoint defined in 'src/pages/api/vitals.ts'.
- Boundary markers: Ingested data is treated as plain text telemetry for performance tracking.
- Capability inventory: The skill can transmit collected metrics to Slack and PagerDuty for alerting purposes.
- Sanitization: The implementation focuses on standard performance data collection and reporting.
- [COMMAND_EXECUTION]: The synthetic monitoring module programmatically interacts with browser environments.
- Evidence: 'scripts/synthetic-monitor.ts' uses 'puppeteer.launch()' to initialize a browser for Lighthouse performance testing.
- Context: This behavior is essential for the skill's primary function of generating synthetic performance reports.
- [EXTERNAL_DOWNLOADS]: The skill utilizes established third-party automation tools within its CI/CD workflows.
- Evidence: The Lighthouse CI workflow employs the 'treosh/lighthouse-ci-action' to perform automated audits during the build process.
- Context: This is a well-known service used for performance regression monitoring.
Audit Metadata