pp-azure-cost-admin
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill instructs the user to install a command-line interface (CLI) using
npxfrom@mvanhorn/printing-press-libraryorgo installfromgithub.com/mvanhorn/printing-press-library. These resources are owned by the skill's identified vendor. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external Azure APIs (Cost Management, Resource Graph, and Retail Prices) and outputs results to the agent.
- Ingestion points: Data enters the agent context through the stdout of
azure-cost-admin-pp-clicommands likespend summaryandtags untagged(SKILL.md). - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions for the data returned by the CLI.
- Capability inventory: The skill uses
Read Bashto execute the CLI commands. - Sanitization: There is no explicit sanitization or validation of the API responses before they are processed by the agent.
Audit Metadata