cargo-billing

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the @cargo-ai/cli package from npm. This is the official command-line interface for the Cargo platform, provided by the vendor for administrative purposes.
  • [COMMAND_EXECUTION]: The skill relies on executing cargo-ai commands to retrieve usage metrics, manage subscriptions, and update payment information. These operations are within the stated scope of the billing management tool and target the vendor's own infrastructure.
  • [PRIVILEGE_ESCALATION]: The skill notes that its commands require a token with admin access on the Cargo workspace. This is a platform-specific permission level required for billing operations and does not represent an escalation of privileges on the host operating system.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 09:46 AM