Performance Profiler

Profile and optimize application performance. Use when diagnosing slow code, measuring CPU/memory usage, generating flame graphs, benchmarking functions, load testing APIs, finding memory leaks, or optimizing database queries.

This skill is a coherent profiling and benchmarking recipe, but it contains commands that install packages and run profilers against your processes. Before using it: 1) review any install commands (pip, npm, system packages) and avoid blindly running third‑party installs; 2) run profiling and load tests in a safe/dev environment, not on sensitive production systems; 3) be aware some profilers may require elevated permissions or attach to running processes — grant only the minimum necessary privileges; 4) check any downloaded tools' official release pages (e.g., hyperfine on GitHub) before installing.

Type: OpenClaw Skill Name: perf-profiler Version: 1.0.0 The skill is classified as suspicious primarily due to the inclusion of a `perf-compare.sh` script within `SKILL.md` that uses `eval "$CMD"`. While this `eval` command is presented in the context of benchmarking a user-provided command, it allows for arbitrary command execution, posing a significant risk if the agent or user provides malicious input. Additionally, the skill's metadata requests broad system access via binaries like `node`, `python3`, `go`, `curl`, and `ab`, which, while plausible for a profiling tool, further increases the potential attack surface.