cost-estimator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses official AWS Pricing Bulk API endpoints to fetch data. The
fetch-aws-pricing.pyscript includes security checks to ensure only HTTPS protocols are used for network requests, preventing URI scheme attacks.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local project files to identify AWS resources.\n - Ingestion points: Files like
**/cdk.json,**/lib/**/*.ts, and architecture documentation are scanned as perreferences/cdk-analysis.md.\n - Boundary markers: Section 2.5 of
cdk-analysis.mddefines a mandatory confirmation step where findings are presented to the user before processing.\n - Capability inventory: The skill performs network fetches for pricing and writes cost reports to the filesystem.\n
- Sanitization: Discovered data is presented in a structured table for human review to mitigate the risk of malicious instructions hidden in code comments or documentation being followed blindly.
Audit Metadata