cost-drift
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs benign environmental checks, such as verifying the presence of Pulumi.yaml and the finfocus binary.
- [COMMAND_EXECUTION]: The skill executes finfocus overview --output json and markdownlint. These are standard development tools and are used for their intended purpose of infrastructure analysis and report formatting.
- [SAFE]: The skill reads and writes local project files (.cost-check.yml, COST_DRIFT.md) to manage configuration and report findings. No sensitive system paths or credentials are accessed.
- [EXTERNAL_DOWNLOADS]: The documentation includes a link to the author's GitHub repository for the finfocus tool. The skill does not automate the download or execution of remote scripts.
Audit Metadata