agent-usage-optimizer

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local scripts to perform its primary functions, such as scripts/ai/assessment/query-quota.sh for usage tracking and scripts/ai/provider-autolabel.py for task management. These are standard operational tasks for the skill's stated purpose.
  • [PROMPT_INJECTION]: An indirect prompt injection surface is present because the skill ingests untrusted data from GitHub issues via gh issue list to automate task routing. The skill documents defensive measures, including a high confidence threshold (>= 0.90) and human review checkpoints, which mitigate the risk of malicious issue content influencing agent behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 02:45 PM
Security Audit — agent-trust-hub — agent-usage-optimizer