cloud-cost-optimization
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: A detailed review of the SKILL.md and documentation reveals no malicious prompt injection patterns, metadata poisoning, or attempts to bypass safety filters. The skill's stated purpose aligns with its implementation.\n- [COMMAND_EXECUTION]: The script
analyze-cloud-costs.shis designed to interact with official cloud CLIs (aws, az, gcloud). It follows secure shell scripting practices by validating the threshold parameter with a numeric regular expression and using static case-selection for provider and period variables, preventing any risk of command injection from user input.\n- [EXTERNAL_DOWNLOADS]: The documentation references well-known services and trusted organizations including Amazon Web Services, Microsoft Azure, and Google Cloud, along with reputable industry tools like Infracost and CloudQuery. These are static documentation references and no automated, unverified code downloads or remote script executions are performed.
Audit Metadata