claude-usage-analyst
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the local
ccusagecommand-line tool via a Python script to retrieve usage data in JSON format. The implementation inscripts/analyze_claude_usage.pyfollows security best practices by usingsubprocess.runwith a list of arguments and avoidingshell=True, which prevents command injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The documentation in
SKILL.mdprovides instructions for installing theccusagepackage via NPM (npm install -g ccusage). This is the primary dependency required for the skill to function and is a standard administrative task for the tool's purpose.
Audit Metadata