attio-cost-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions focus on performance and cost optimization of a specific SaaS integration (Attio) without introducing dangerous operations.\n- [DATA_EXFILTRATION]: No hardcoded credentials or access to sensitive local files (like .ssh or .aws) were detected. The skill correctly advises using existing least-privilege Bearer credentials for observation.\n- [REMOTE_CODE_EXECUTION]: No remote code execution patterns, package installations, or dynamic code generation were found. All network activity via WebFetch is directed toward official Attio documentation (docs.attio.com).\n- [INDIRECT_PROMPT_INJECTION]: While the skill ingests local code and documentation, it does so for analytical purposes with the agent's standard tools. The attack surface is minimal as it operates on the developer's own codebase and trusted documentation.\n- [OBFUSCATION]: No obfuscation, hidden characters, or encoded content was found in the skill files.
Audit Metadata