ai-agent-cost-optimizer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to audit and analyze external data sources, including provider documentation, benchmark results, and social media content. This creates an indirect prompt injection surface where instructions embedded in these external sources could theoretically influence agent behavior during the audit process.
- Ingestion points: Local logs, configuration files, external provider documentation, and benchmark reports referenced in the audit workflow (SKILL.md).
- Boundary markers: The skill does not explicitly define delimiters for separating untrusted data from instructions.
- Capability inventory: The skill relies on standard agent capabilities for file reading and potential network access for documentation verification.
- Sanitization: No specific sanitization or validation steps are provided for the external data ingested during the audit.
- [NO_CODE]: This skill consists entirely of instructional markdown and configuration metadata. It does not include any executable scripts, binaries, or automated command execution, significantly reducing the security risk.
Audit Metadata