dd-audit-cost-spike-investigation
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard CLI tools (
curl,jq,date) and thepuputility to fetch usage data and audit logs from Datadog's official APIs. These operations are aligned with the skill's stated purpose of FinOps investigation. - [DATA_EXPOSURE]: The skill requires the user to export
DD_API_KEYandDD_APP_KEYenvironment variables. It follows best practices by instructing the user to set these as environment variables rather than hardcoding them. Data accessed is limited to Datadog metadata (usage volumes and audit trail event logs). - [EXTERNAL_DOWNLOADS]: No external code or scripts are downloaded or executed. The tool
pupis mentioned as a prerequisite, which is a common pattern for platform-specific skills.
Audit Metadata