cloud-usage-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The Python script performs standard file input/output operations restricted to paths provided via command-line arguments. It does not access sensitive system paths.
- [SAFE]: No external dependencies or remote code patterns were detected; the script relies solely on Python's built-in standard library (argparse, json, pathlib).
- [INDIRECT_PROMPT_INJECTION]: The skill processes external JSON data (ingested in
run.py), but it lacks the capabilities (such as network access, subprocess execution, or dynamic code evaluation) required for a malicious payload to result in exploitation. The data processing is limited to identifying and returning JSON keys.
Audit Metadata