ai-inference-pricing
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest data from local project files such as .agents/product-marketing.md and .agents/aaj-brand.md. While this creates an ingestion surface for potentially untrusted data, the skill lacks dangerous capabilities like network access or file-writing, limiting the risk of exploitation.\n
- Ingestion points: .agents/product-marketing.md, .agents/aaj-brand.md, and CLI JSON input.\n
- Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are defined for the ingested files.\n
- Capability inventory: The skill executes a local Node.js script (resources/inference-pricing.js) which performs mathematical calculations and returns text-based results. No network operations or file-system modification capabilities were found.\n
- Sanitization: The JavaScript engine validates data types and numerical ranges for the JSON input but does not perform natural language sanitization of ingested markdown content.\n- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute a local Node.js script (resources/inference-pricing.js) to perform cost analysis. The script is bundled with the skill and its behavior is limited to data processing and console output, matching its primary stated purpose.\n- [DATA_EXPOSURE]: The skill reads from local marketing context files to gather pricing and product details. This access is restricted to the agent's workspace and is used solely for the calculation of inference costs without external transmission.
Audit Metadata