cost-aware-llm-pipeline
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is an educational resource providing patterns for LLM cost optimization, such as model routing and budget tracking. No malicious code or functional vulnerabilities were detected within the documentation or code snippets.
- [PROMPT_INJECTION]: The skill defines a data ingestion surface where external text is processed by an LLM. While presented as architectural advice, developers should implement boundary markers to mitigate indirect prompt injection risks.
- Ingestion points: The
processfunction inSKILL.mdaccepts atextparameter from external sources. - Boundary markers: Absent; the example code does not demonstrate the use of delimiters (e.g., XML tags) to separate user input from system instructions.
- Capability inventory: The pipeline includes model execution capabilities via
client.messages.createinSKILL.md. - Sanitization: No explicit input sanitization or validation logic is provided in the example implementation.
Audit Metadata