aws-billing-and-cost-management

Pass

Audited by Gen Agent Trust Hub on Jul 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of the AWS CLI (aws ce, aws budgets, aws compute-optimizer, aws ec2, etc.) to interact with AWS services. These are legitimate and required operations for the skill's stated purpose of cost management and resource optimization.
  • [DYNAMIC_EXECUTION]: In references/deterministic-calculations.md, the skill instructs the agent to generate and execute Python scripts to perform arithmetic on data retrieved from AWS APIs. This is identified as a best-practice measure for financial data analysis to prevent errors caused by LLM arithmetic hallucinations. The provided templates focus on summation and percentage calculations.
  • [SAFE]: All external URLs referenced in the skill point to official AWS documentation (aws.amazon.com, docs.aws.amazon.com), official AWS calculators (calculator.aws), or well-known and reputable community resources for AWS best practices (wellarchitectedlabs.com).
  • [SAFE]: The skill includes explicit instructions to verify the current date before performing cost queries, which is a key safety measure to prevent providing users with plausible-looking but stale financial information based on the model's training data.
  • [SAFE]: Analysis found no evidence of prompt injection, multi-layer obfuscation, or attempts to exfiltrate sensitive data or credentials. The skill focuses on using existing user-provided credentials via the standard AWS CLI environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 24, 2026, 03:51 PM
Security Audit — agent-trust-hub — aws-billing-and-cost-management