cube-build-content
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides a command to download an installation script (
install-cli.sh) from the vendor's official GitHub repository (cube-js/cube). - [REMOTE_CODE_EXECUTION]: The installation command pipes the remote script directly to a shell (
| sh). This is documented as the standard method for installing the vendor's command-line interface tools. - [COMMAND_EXECUTION]: The skill utilizes several subcommands of the
cubeCLI tool (e.g.,cube workbooks,cube reports,cube notifications) to interact with the Cube platform. - [CREDENTIALS_UNSAFE]: The instructions identify
CUBE_API_URLandCUBE_API_KEYas the environment variables required for headless authentication, guiding the user on necessary configuration without exposing actual secrets.
Audit Metadata