cloud-cost-optimizer
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts that invoke official cloud CLI tools (
aws,az,gcloud) to retrieve billing information and resource lists. These operations are transparent, perform read-only queries against the user's active cloud session, and do not handle credentials directly. - [DATA_EXFILTRATION]: While the skill reads cloud billing and resource metadata, the analysis shows no network operations to external or untrusted domains. The data collected remains within the local agent environment for analysis.
- [SAFE]: The logic in
scripts/analyze-costs.shfollows security best practices, including input validation, error handling, andset -euo pipefailto ensure robust script execution. The skill does not attempt to modify production infrastructure or escalate privileges.
Audit Metadata