copilotkit-setup
Pass
Audited by Gen Agent Trust Hub on May 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to run standard development commands such as
npm installfor package management andnpx copilotkit authfor account authentication with the vendor's platform. - [EXTERNAL_DOWNLOADS]: Dependencies are retrieved from the official NPM registry, targeting the
@copilotkitnamespace and other well-known libraries like Express, Hono, and Zod. - [CREDENTIALS_UNSAFE]: The setup guide correctly advises users to manage sensitive AI provider API keys using environment variables in
.envor.env.localfiles rather than hardcoding them. - [DATA_EXFILTRATION]: The skill includes documentation for an optional telemetry connection to CopilotCloud for usage analytics and error monitoring. It provides clear instructions on how to opt-out by removing the
licenseKeyprop.
Audit Metadata