cueframe-cli

Pass

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPERSISTENCE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the execution of the cueframe package via npx, which involves downloading code from the public npm registry at runtime.
  • [COMMAND_EXECUTION]: The instructions provide a comprehensive set of shell commands for the agent to perform video uploads, project creation, composition management, and rendering tasks.
  • [CREDENTIALS_UNSAFE]: Documentation describes the management of API keys using the CUEFRAME_API_KEY environment variable and local storage in ~/.cueframe/auth.json for persistent authentication.
  • [PERSISTENCE]: The install command is documented to install managed skills into agent-specific configuration directories like ~/.agents/skills and ~/.claude/skills, modifying the agent's persistent environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 11, 2026, 02:14 PM