cloud-cost-management

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the Azure CLI by downloading a script from a well-known service domain.
  • Evidence: references/azure-cost-management.md contains the command curl -sL https://aka.ms/InstallAzureCLIDeb | bash.
  • Context: This is the official installation method provided by Microsoft for the Azure command-line interface.
  • [COMMAND_EXECUTION]: The skill utilizes several standard cloud provider CLI tools (AWS CLI, Azure CLI, and gcloud) to query billing data and resource metadata.
  • Evidence: Found across SKILL.md, references/aws-cost-optimization-with-aws-cli.md, references/azure-cost-management.md, and references/gcp-cost-optimization.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process infrastructure metadata and billing information from cloud provider APIs.
  • Ingestion points: Cloud provider API responses via boto3 in references/cost-monitoring-dashboard.md and CLI tool outputs in SKILL.md.
  • Boundary markers: Absent; data is processed as structured output (JSON/Table) or via SDK objects.
  • Capability inventory: Read-only access to cost and usage reports, resource listing (EC2, RDS, EBS, etc.), and configuration of budget alerts.
  • Sanitization: Data is treated as authoritative infrastructure state from the cloud provider; no explicit sanitization is performed on API responses.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:44 AM
Security Audit — agent-trust-hub — cloud-cost-management