cargo-billing@2.1.5
VERIFIED· install onlyPublisher claims: "Reports what Cargo is costing: remaining credits, usage by workflow, connector or agent, the plan, and invoices. New accounts start with 100 free credits, no card. Triggers: "how many credits do I have left", "what did that cost", "why is my bill so high", "am I about to run out", "will this fit in our budget", "show me my invoices", "how much have I spent this month", "what plan am I on", "what do I get for free", "how many free credits", "can I afford this run", "add a card", "update my payment method", "why was my card declined". Needs a token with admin access. Skip when: attributing spend to specific nodes or cutting a play cost, use cargo-diagnostics." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Coverage
Nothing executable in the bundle ran; the trace covers the install step only.- Tested
- every file read, file written and host contacted by what ran
- Not tested
- use of the skill by an agent
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-09 and scored it 93/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationsStatic findings
… \"update my payment method\", \"why was my card declined\". Needs a token with admin access. Skip when: attributing spend to specific nodes or cutting a play cost, use car…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.npm install -g @cargo-ai/cli # no global install? prefix every command with `npx @cargo-ai/cli`Fix: Pin versions and sources; vendor anything fetched at install time.…s); the API answers 401 `{"reason":"unauthorized"}`, not 403 | Use a token with admin access; check workspace settings under **Settings > API** | | Invoice amounts look wro…Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.…tching `get`. **Admin-only:** every command in this skill requires a token with admin access on the workspace (the `billing:read` permission; card, plan and top-up changes …Fix: Remove the text that addresses the agent rather than the reader; describe behavior, do not instruct.Cost to the agent
Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.
Known vulnerabilities
Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.