cloud-cost-management
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the Azure CLI by downloading a script from a well-known service domain.
- Evidence:
references/azure-cost-management.mdcontains the commandcurl -sL https://aka.ms/InstallAzureCLIDeb | bash. - Context: This is the official installation method provided by Microsoft for the Azure command-line interface.
- [COMMAND_EXECUTION]: The skill utilizes several standard cloud provider CLI tools (AWS CLI, Azure CLI, and gcloud) to query billing data and resource metadata.
- Evidence: Found across
SKILL.md,references/aws-cost-optimization-with-aws-cli.md,references/azure-cost-management.md, andreferences/gcp-cost-optimization.md. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process infrastructure metadata and billing information from cloud provider APIs.
- Ingestion points: Cloud provider API responses via
boto3inreferences/cost-monitoring-dashboard.mdand CLI tool outputs inSKILL.md. - Boundary markers: Absent; data is processed as structured output (JSON/Table) or via SDK objects.
- Capability inventory: Read-only access to cost and usage reports, resource listing (EC2, RDS, EBS, etc.), and configuration of budget alerts.
- Sanitization: Data is treated as authoritative infrastructure state from the cloud provider; no explicit sanitization is performed on API responses.
Audit Metadata