ai-usage
Checks AI CLI usage and quota for various coding assistants, helping users manage their usage limits effectively.
Install this skill
or
60/100
Security score
The ai-usage skill was audited on Jul 27, 2026 and we found 10 security issues across 4 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
medium line 45
Curl to non-GitHub URL
SourceSKILL.md
| 45 | curl -H "Authorization: Bearer $SYNTHETIC_API_KEY" https://api.synthetic.new/v2/quotas |
medium line 57
Access to hidden dotfiles in home directory
SourceSKILL.md
| 57 | | **Claude** | `~/.claude/.credentials.json` (Linux) or macOS Keychain | |
medium line 58
Access to hidden dotfiles in home directory
SourceSKILL.md
| 58 | | **Codex** | `~/.codex/auth.json` | |
medium line 59
Access to hidden dotfiles in home directory
SourceSKILL.md
| 59 | | **Gemini** | `~/.gemini/oauth_creds.json` (auto-refreshes) | |
low line 71
Access to hidden dotfiles in home directory
SourceSKILL.md
| 71 | export ZAI_KEY=your-key # Add to ~/.zshrc |
high line 57
Access to system keychain/keyring
SourceSKILL.md
| 57 | | **Claude** | `~/.claude/.credentials.json` (Linux) or macOS Keychain | |
low line 13
External URL reference
SourceSKILL.md
| 13 | Uses the [cclimits](https://www.npmjs.com/package/cclimits) npm package. |
low line 45
External URL reference
SourceSKILL.md
| 45 | curl -H "Authorization: Bearer $SYNTHETIC_API_KEY" https://api.synthetic.new/v2/quotas |
low line 72
External URL reference
SourceSKILL.md
| 72 | export SYNTHETIC_API_KEY=your-key # Get from https://synthetic.new dashboard |
low line 198
External URL reference
SourceSKILL.md
| 198 | **npm package:** [cclimits](https://www.npmjs.com/package/cclimits) |
Scanned on Jul 27, 2026
View Security Dashboard