budget-estimator
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches pricing information from external provider websites when local cached data is older than 30 days. This is a functional requirement for accurate budgeting and targets well-known service domains.
- [PROMPT_INJECTION]: The skill processes untrusted data from external provider pages and local project files, creating an indirect prompt injection surface.
- Ingestion points: Reads project-specific SPEC.md files, storyboard files, tools configuration, production logs, and external provider websites.
- Boundary markers: No specific delimiters or instructions are provided to the agent to separate untrusted data from the primary skill instructions.
- Capability inventory: The skill writes a markdown-formatted cost report to the local budgets/ directory.
- Sanitization: No explicit sanitization, validation, or filtering of the fetched external content is described.
Audit Metadata