eks-cost-intelligence
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
awsCLI andkubectlto query cluster metadata, resource status, and cost data. These operations are essential for the skill's cost-assessment purpose and are performed in a read-only manner during the discovery and analysis phases. - [EXTERNAL_DOWNLOADS]: Instructions reference the official
metrics-servercomponent from the trustedkubernetes-sigsGitHub organization. This download is used to enable utilization-based cost analysis and originates from a verified source. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from EKS and Kubernetes APIs that may contain untrusted strings (e.g., namespace names or pod labels). The skill mitigates risks by using a report generation tool that implements HTML escaping and URL scheme validation for all interpolated data.
- [DYNAMIC_EXECUTION]: A local Python tool (
tools/report_to_html.py) is provided for report conversion. Analysis of the source code confirms it relies strictly on standard libraries and includes appropriate data sanitization logic.
Audit Metadata