cube-run-query
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill contains a command to download and execute the Cube CLI installation script.
- Evidence:
curl -fsSL https://raw.githubusercontent.com/cube-js/cube/master/install-cli.sh | shin SKILL.md. - The script is hosted on the vendor's official GitHub repository (
cube-js/cube) and is a standard method for installing the tool required for the skill's functionality. - [EXTERNAL_DOWNLOADS]: The skill fetches the installation script from an external GitHub repository.
- Evidence:
https://raw.githubusercontent.com/cube-js/cube/master/install-cli.shin SKILL.md. - [COMMAND_EXECUTION]: The skill uses local shell commands to interact with the Cube CLI and perform API requests via curl.
- Evidence: Commands such as
cube deployments get,cube deployments token, andcurl -s "$URL/cubejs-api/v1/load"are used to retrieve configuration and execute data queries.
Audit Metadata