api-usage-monitoring
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [PERSISTENCE]: The skill documentation includes instructions for setting up a recurring cron job ("用量监控每6小时") to execute monitoring and reporting scripts automatically every six hours.
- [COMMAND_EXECUTION]: The skill provides executable shell commands, including a Python one-liner used to read from and write to the local log file
~/.hermes/usage_log.jsonfor balance snapshot management. - [DATA_EXFILTRATION]: The monitoring system is designed to transmit detailed account usage metrics, including token consumption and financial balances, to the external WeChat messaging platform via the
deliver: weixininstruction. - [EXTERNAL_DOWNLOADS]: The skill configuration specifies routing API traffic through a specific external proxy IP (
43.159.133.35:8888) to facilitate access to DeepSeek services and references fetching currency conversion data fromexchangerate-api.com.
Audit Metadata