Security audit

python-performance

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Python performance guidance skill with some optional profiling tool installs that users should approve and isolate.

Before installing optional profiling tools, use a virtual environment, prefer pinned versions or a locked requirements file, and only attach py-spy to processes you are authorized to inspect. The broad triggers may cause the skill to appear during general Python work, but the reviewed content is disclosed and purpose-aligned.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally

Findings (4)

T08 · Insecure Dependencies

Warning

Location: modules/benchmarking-tools.md:39
Finding: Unpinned pytest-benchmark Dependency Installation
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: modules/profiling-tools.md:47
Finding: Unpinned line-profiler Dependency Installation
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: modules/profiling-tools.md:62
Finding: Unpinned memory-profiler Dependency Installation
Content: View full analysis
Remediation: View remediation

T08 · Insecure Dependencies

Warning

Location: modules/profiling-tools.md:77
Finding: Unpinned py-spy Dependency Installation
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The trigger list includes broad phrases such as 'python', 'performance', and 'Python code is slow or when profiling for optimization before a release', which are likely to match normal conversation and unintentionally activate the skill outside narrow profiling contexts. Over-broad activation increases the chance that the skill intercepts unrelated requests, causing unintended guidance injection or workflow disruption if the agent auto-loads skills based on trigger text.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.