ai-agent-cost-optimizer
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected in the skill files.
- [NO_CODE]: The skill is purely instructional and does not include any scripts, dependencies, or executable content. It defines an audit workflow for the agent to follow through natural language prompts.
- [DATA_EXPOSURE]: While the skill suggests inspecting local logs or configs to determine API spend (Step 1), it provides no mechanism to transmit this data externally or access files beyond those the agent already has permission to read. No sensitive file paths or credentials are hardcoded.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze external data like logs and workflow captures. This constitutes a theoretical ingestion surface for untrusted data; however, the skill lacks any 'write' capabilities or network tools to execute an exploit, and the risk is mitigated by the analytical nature of the task.
Audit Metadata