Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed model-pricing and recommendation integration that makes purpose-aligned external API calls without evidence of hidden persistence, destructive behavior, or unrelated data access.
Install this if you are comfortable sending model-selection constraints, model IDs, and related pricing questions to InferenceIndexer. Avoid letting it inspect sensitive usage logs unless you explicitly want a cost audit, and review any recommended provider switch before changing production traffic.
The skill requires network-capable behavior via an MCP server and also instructs direct external API use, but it does not declare an explicit tool scope such as allowed-tools or permissions. That increases the chance of unintended outbound requests or broader-than-expected access when the skill is invoked, reducing least-privilege guarantees.
The description uses broad activation language such as model choice, cost cutting, and general 'which model should I use' scenarios, which can cause the skill to trigger during ordinary conversation without clear user intent. Over-broad invocation can lead to unnecessary external calls, unintended disclosure of user requirements or configuration details, and surprising behavior.
The 'When to call' section contains expansive, ambiguous criteria like new task types, budget concerns, degraded models, and sub-agent setup, but does not define clear boundaries for when the skill must not run. In context, that makes the skill more dangerous because it can initiate network-backed recommendation flows and process user configuration/cost data in situations where the user did not explicitly request external lookup.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
"why": "Rank 1 by Cost/IQ ... cheapest verified endpoint at DeepInfra",
"endpoint_config": {
"provider": "DeepInfra",
"base_url": "https://api.deepinfra.com/v1/openai",
"model_id_on_provider": "l3-lunaris-8b",
"input_price_per_m": 0.04,
"output_price_per_m": 0.05,
The skill instructs obtaining an anonymous API key from an external service, which creates an outbound transmission path and introduces third-party dependency without accompanying consent, scoping, or data-handling guardrails. In context, this is more sensitive because the skill may be triggered broadly and could cause external account/token acquisition and subsequent data exchange with a remote service.
## Getting a key
Anonymous key in one call, no email or account:
`POST https://api.inferenceindexer.ai/v1/auth/anonymous` (free tier: 10,000
requests/day, 30 days of history). Humans: https://www.inferenceindexer.ai/signup?src=clawhub
for usage tracking and a dashboard.
No suspicious patterns detected.