cueframe-cli
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPERSISTENCE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the execution of the
cueframepackage vianpx, which involves downloading code from the public npm registry at runtime. - [COMMAND_EXECUTION]: The instructions provide a comprehensive set of shell commands for the agent to perform video uploads, project creation, composition management, and rendering tasks.
- [CREDENTIALS_UNSAFE]: Documentation describes the management of API keys using the
CUEFRAME_API_KEYenvironment variable and local storage in~/.cueframe/auth.jsonfor persistent authentication. - [PERSISTENCE]: The
installcommand is documented to install managed skills into agent-specific configuration directories like~/.agents/skillsand~/.claude/skills, modifying the agent's persistent environment.
Audit Metadata