cost-aware-llm-pipeline

Pass

Audited by Gen Agent Trust Hub on Apr 7, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill features a pipeline template that processes untrusted task content within model prompts. 1. Ingestion points: The 'tasks' input parameter in the 'cost_aware_pipeline' function in SKILL.md. 2. Boundary markers: No delimiters or isolation instructions are implemented in the example code. 3. Capability inventory: The skill utilizes the Anthropic API client to perform model calls. 4. Sanitization: No logic for escaping or validating input prompts is provided in the template.
  • [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill utilizes the standard 'anthropic' Python library to facilitate communication with language model services.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 7, 2026, 04:23 PM
Security Audit — agent-trust-hub — cost-aware-llm-pipeline