b2-lifecycle-cost-hygiene
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements strong safety gates, requiring explicit user confirmation before executing potentially destructive tools such as
s3_delete_object,s3_abort_multipart_upload, ands3_put_bucket_lifecycle. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted metadata from cloud storage. 1. Ingestion points: Storage metadata is read via
s3_list_objects_v2ands3_list_object_versions(SKILL.md). 2. Boundary markers: No explicit delimiters are used for the ingested metadata. 3. Capability inventory: The skill can perform destructive operations usings3_delete_objectands3_put_bucket_lifecycle(SKILL.md). 4. Sanitization: The risk is mitigated by explicit 'Safety gates' requiring human confirmation before any destructive or configuration changes are applied.
Audit Metadata