model-usage
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/model_usage.pyexecutes thecodexbarCLI tool viasubprocess.check_output. Arguments such as the provider are strictly validated against a predefined list of choices, which prevents command injection. - [EXTERNAL_DOWNLOADS]: The skill requires the
codexbarutility, which is installed via a third-party Homebrew tap. This is a documented and necessary dependency for the skill to access local usage data.
Audit Metadata