cost-aware-llm-pipeline
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown documentation. No executable scripts (.py, .js, .sh) or binaries are included in the package.
- [SAFE]: The code patterns provided for model routing, budget tracking, and retry logic are standard development practices for LLM integrations.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for processing external data (e.g., 'user_input') through an LLM. While it lacks explicit input sanitization or boundary markers in the snippets, this represents a typical application surface rather than a malicious intent.
- Ingestion points: The 'process' function and message construction snippets ingest variable 'text' and 'user_input' in SKILL.md.
- Boundary markers: Absent in the provided code examples.
- Capability inventory: The patterns demonstrate interactions with the Anthropic API via the 'anthropic' client.
- Sanitization: No sanitization or escaping logic is included in the documentation.
Audit Metadata