lightning-cost-estimation
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install or upgrade the
lightning-sdkpackage from PyPI using standard package managers (pip,uv). This is necessary to provide the cost estimation functionality and is a verified resource from the skill author, lightning-ai. - [COMMAND_EXECUTION]: The skill defines and executes shell functions that use
curl,jq, and thelightningCLI to fetch and format pricing data. These operations are restricted to the vendor's official domain (lightning.ai) and follow best practices for argument handling, such as usingjq --argto prevent injection. - [DATA_EXPOSURE_AND_EXFILTRATION]: While the skill mentions environment variables like
LIGHTNING_API_KEY, it does so in the context of standard authentication for the official API and does not attempt to access or exfiltrate sensitive files or credentials.
Audit Metadata