report-limit
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches pricing information from a well-known service to update its local model definitions.
- Evidence: Fetches data from
https://platform.claude.com/docs/en/about-claude/pricing#model-pricingusingWebFetchwhen unknown models are encountered. - [DATA_EXFILTRATION]: The skill collects and exports usage statistics (rate-limit window data) to the author's public GitHub repository.
- Evidence: Data is uploaded to a GitHub Gist and a discussion is opened at
github.com/ww-w-ai/cc-token-saver. - [COMMAND_EXECUTION]: The skill executes local scripts and command-line tools to process data and interface with external services.
- Evidence: Runs a local Node.js script
report-limit.jsand uses the GitHub CLI (gh) for gist creation and discussion management.
Audit Metadata