altllm-portal-billing
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local shell commands (node dist/cli.js) to query the AltLLM billing system. These commands include parameters for promo codes, date ranges, and pagination.
- [SAFE]: The skill is designed to interact with official service endpoints at platform-api.altllm.ai. No evidence of data exfiltration, credential theft, or unauthorized persistence was found.
- [SAFE]: Ingestion of external content occurs when the skill processes API responses from platform-api.altllm.ai. While this creates a surface for indirect instructions, the ingestion is limited to structured billing metadata. The skill's capabilities are restricted to the billing CLI, and no explicit sanitization or boundary markers are documented in the instruction files.
Audit Metadata