billing
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
zillizcommand-line interface to query billing usage and list invoices. These operations are restricted to information retrieval and do not involve system-level modifications or sensitive credential handling within the skill body. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied parameters such as date ranges and invoice IDs which are interpolated into CLI commands. While this presents a standard injection surface, the scope is limited to the billing subcommands of the vendor-specific CLI.
- Ingestion points: User-provided arguments for dates, time ranges, and invoice identifiers used in
SKILL.mdcommands. - Boundary markers: None explicitly defined in the provided instructions.
- Capability inventory: Execution of the
zillizCLI billing subcommands. - Sanitization: No specific sanitization or validation logic is defined for the input parameters before they are passed to the CLI.
Audit Metadata