logging-performance-optimization
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/analyze-performance.shexecutes shell commands and utilizes thebcutility to perform calculations and generate configuration files. It operates on user-supplied arguments for log volume and size without explicit validation.- [PROMPT_INJECTION]: The skill facilitates the analysis of external codebases and logging configurations, presenting an indirect prompt injection surface. * Ingestion points: User-provided source code and configuration files defined as targets for optimization inSKILL.md. * Boundary markers: None identified; instructions do not include delimiters or warnings to ignore embedded content in analyzed files. * Capability inventory: Local file writing and shell command execution viascripts/analyze-performance.sh. * Sanitization: Input parameters in the analysis script are used directly in file generation without sanitization.- [EXTERNAL_DOWNLOADS]: The skill references several external dependencies in its examples and benchmarks, includingmsgpack,python-json-logger,concurrent-log-handler, and theasync-profilertool (profiler.sh). While standard in development workflows, these are third-party resources.
Audit Metadata