llm-cost-optimization
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates processing external data (files and user prompts), which creates a standard attack surface for indirect prompt injection if the processed content is untrusted.
- Ingestion points: Code snippets in
SKILL.mdshow reading from a local file (large-context.txt) and accepting apromptvariable in thecached_llm_callfunction. - Boundary markers: The educational examples do not include explicit delimiters or instructions to the LLM to ignore potentially malicious embedded commands in the context.
- Capability inventory: The skill demonstrates interaction with LLM APIs (OpenAI, Anthropic) and a local Redis instance for data persistence.
- Sanitization: No input validation or filtering is shown in the provided documentation examples.
Audit Metadata