claude-usage-analyst

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the local ccusage command-line tool via a Python script to retrieve usage data in JSON format. The implementation in scripts/analyze_claude_usage.py follows security best practices by using subprocess.run with a list of arguments and avoiding shell=True, which prevents command injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The documentation in SKILL.md provides instructions for installing the ccusage package via NPM (npm install -g ccusage). This is the primary dependency required for the skill to function and is a standard administrative task for the tool's purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 03:06 AM
Security Audit — agent-trust-hub — claude-usage-analyst