copilotkit-setup
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Node.js packages under the
@copilotkitnamespace, such as@copilotkit/react,@copilotkit/runtime, and@copilotkit/agent. These are standard dependencies required for the library's functionality. - [COMMAND_EXECUTION]: Instructions include standard development commands like
npm installandnpx copilotkit auth. The auth command is a vendor-provided CLI tool for authenticating with the CopilotCloud platform. - [CREDENTIALS_UNSAFE]: The documentation correctly advises users to store AI provider API keys (e.g.,
OPENAI_API_KEY) in environment variables within.envor.env.localfiles, avoiding hardcoding sensitive credentials in source code. - [SAFE]: Telemetry features and the use of license keys (
ck_...) are documented as standard platform functionality for analytics and error monitoring. The skill provides clear information on the purpose of these keys and how to opt out by removing the property.
Audit Metadata