cargo-cli-billing
Pass
Audited by Gen Agent Trust Hub on Mar 30, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a comprehensive set of commands for the
cargo-aiCLI to pull usage metrics, check subscription status, and manage credits. These operations are restricted to the vendor's own ecosystem. - [EXTERNAL_DOWNLOADS]: The skill requires the
@cargo-ai/clipackage from the npm registry. This is a standard dependency for accessing the vendor's services and is documented neutrally. - [CREDENTIALS_UNSAFE]: Authentication instructions use placeholders like
<your-api-token>and<uuid>, which is a safe way to document credential usage without exposing sensitive information. - [DATA_EXFILTRATION]: While the skill accesses billing and usage data, all network operations are performed through the official CLI tool to the vendor's API for legitimate administrative purposes.
Audit Metadata