finops-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of standard, well-known industry tools including Infracost (via Homebrew) and OpenCost (via Helm chart repositories).
- [COMMAND_EXECUTION]: Includes example shell commands for cost analysis and Kubernetes API interactions (e.g., curl calls to localhost:9003 for OpenCost data).
- [SAFE]: Secret management in the provided GitHub Actions examples follows security best practices by utilizing GitHub Secrets placeholders (e.g.,
${{ secrets.INFRACOST_API_KEY }}) rather than hardcoding credentials. - [SAFE]: The Python code provided for S3 lifecycle management uses the official
boto3library for standard cloud infrastructure operations.
Audit Metadata