view-usage
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlfor interacting with LiteLLM proxy endpoints andpython3for parsing and formatting JSON results. These tools are used appropriately for the skill's primary function of usage reporting and are restricted via theallowed-toolsfrontmatter. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a remote LiteLLM proxy, creating a potential surface for indirect prompt injection if the source data is compromised.
- Ingestion points: Data is ingested via
curlrequests to the user-configured LiteLLM proxy URL inSKILL.md. - Boundary markers: Absent; the skill does not use specific markers to delimit external data from agent instructions.
- Capability inventory: Uses
Bash(curl)for network access andBash(python3)for data processing. - Sanitization: The skill uses standard JSON parsing (
json.load) to process results, but does not implement additional sanitization for values displayed to the user.
Audit Metadata