cube-run-query

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill contains a command to download and execute the Cube CLI installation script.
  • Evidence: curl -fsSL https://raw.githubusercontent.com/cube-js/cube/master/install-cli.sh | sh in SKILL.md.
  • The script is hosted on the vendor's official GitHub repository (cube-js/cube) and is a standard method for installing the tool required for the skill's functionality.
  • [EXTERNAL_DOWNLOADS]: The skill fetches the installation script from an external GitHub repository.
  • Evidence: https://raw.githubusercontent.com/cube-js/cube/master/install-cli.sh in SKILL.md.
  • [COMMAND_EXECUTION]: The skill uses local shell commands to interact with the Cube CLI and perform API requests via curl.
  • Evidence: Commands such as cube deployments get, cube deployments token, and curl -s "$URL/cubejs-api/v1/load" are used to retrieve configuration and execute data queries.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 03:30 PM