cube-build-content

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides a command to download an installation script (install-cli.sh) from the vendor's official GitHub repository (cube-js/cube).
  • [REMOTE_CODE_EXECUTION]: The installation command pipes the remote script directly to a shell (| sh). This is documented as the standard method for installing the vendor's command-line interface tools.
  • [COMMAND_EXECUTION]: The skill utilizes several subcommands of the cube CLI tool (e.g., cube workbooks, cube reports, cube notifications) to interact with the Cube platform.
  • [CREDENTIALS_UNSAFE]: The instructions identify CUBE_API_URL and CUBE_API_KEY as the environment variables required for headless authentication, guiding the user on necessary configuration without exposing actual secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 04:15 AM