metronome-portfolio-briefing
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with official Metronome API domains (api.metronome.com and staging.api.metronome.com) to retrieve customer billing and contract data. All operations are documented as read-only retrieval of metrics.
- [SAFE]: Sensitive authentication is managed via the $METRONOME_API_TOKEN environment variable, adhering to standard security practices for secret management by avoiding hardcoded credentials.
- [SAFE]: The skill's logic is focused on data aggregation and threshold-based analysis (e.g., checking for contract overrun or renewal dates) without the use of shell execution, dynamic code loading, or persistence mechanisms.
- [SAFE]: No obfuscation, prompt injection attempts, or unauthorized network exfiltration patterns were identified.
Audit Metadata