billing

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the zilliz command-line interface to query billing usage and list invoices. These operations are restricted to information retrieval and do not involve system-level modifications or sensitive credential handling within the skill body.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied parameters such as date ranges and invoice IDs which are interpolated into CLI commands. While this presents a standard injection surface, the scope is limited to the billing subcommands of the vendor-specific CLI.
  • Ingestion points: User-provided arguments for dates, time ranges, and invoice identifiers used in SKILL.md commands.
  • Boundary markers: None explicitly defined in the provided instructions.
  • Capability inventory: Execution of the zilliz CLI billing subcommands.
  • Sanitization: No specific sanitization or validation logic is defined for the input parameters before they are passed to the CLI.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 06:55 AM
Security Audit — agent-trust-hub — billing