copilotkit-setup

Pass

Audited by Gen Agent Trust Hub on May 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the user to run standard development commands such as npm install for package management and npx copilotkit auth for account authentication with the vendor's platform.
  • [EXTERNAL_DOWNLOADS]: Dependencies are retrieved from the official NPM registry, targeting the @copilotkit namespace and other well-known libraries like Express, Hono, and Zod.
  • [CREDENTIALS_UNSAFE]: The setup guide correctly advises users to manage sensitive AI provider API keys using environment variables in .env or .env.local files rather than hardcoding them.
  • [DATA_EXFILTRATION]: The skill includes documentation for an optional telemetry connection to CopilotCloud for usage analytics and error monitoring. It provides clear instructions on how to opt-out by removing the licenseKey prop.
Audit Metadata
Risk Level
SAFE
Analyzed
May 9, 2026, 07:59 AM