oraclecloud-cost-tuning

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill instructions in SKILL.md involve accessing the ~/.oci/config file to authenticate with Oracle Cloud Infrastructure. This is the standard, documented method for the OCI SDK to obtain credentials and is appropriate for the skill's purpose of cost monitoring.
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation of the oci Python package, which is the official and well-known SDK for Oracle Cloud services.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from the OCI Usage API, including compartment names and service names, which are externally defined.
  • Ingestion points: Usage data retrieved via oci.usage_api.UsageapiClient calls in SKILL.md.
  • Boundary markers: No specific delimiters or warnings are used when printing API data to the console.
  • Capability inventory: The skill has access to Read, Write, Edit, and Bash tools.
  • Sanitization: No explicit sanitization is performed on the data returned by the OCI API before it is displayed, though the risk is mitigated by OCI's validation rules for resource naming.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:48 AM
Security Audit — agent-trust-hub — oraclecloud-cost-tuning