copilotkit-setup

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references official Node.js packages under the @copilotkit namespace, such as @copilotkit/react, @copilotkit/runtime, and @copilotkit/agent. These are standard dependencies required for the library's functionality.
  • [COMMAND_EXECUTION]: Instructions include standard development commands like npm install and npx copilotkit auth. The auth command is a vendor-provided CLI tool for authenticating with the CopilotCloud platform.
  • [CREDENTIALS_UNSAFE]: The documentation correctly advises users to store AI provider API keys (e.g., OPENAI_API_KEY) in environment variables within .env or .env.local files, avoiding hardcoding sensitive credentials in source code.
  • [SAFE]: Telemetry features and the use of license keys (ck_...) are documented as standard platform functionality for analytics and error monitoring. The skill provides clear information on the purpose of these keys and how to opt out by removing the property.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:00 PM