kubb
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of technical documentation, configuration examples, and installation guides for a legitimate development tool (Kubb).
- [COMMAND_EXECUTION]: Documentation includes standard CLI commands for the tool, such as
kubb generateandkubb init. These are presented as instructions for the user to execute within their development environment. - [EXTERNAL_DOWNLOADS]: The skill references numerous official packages from the
@kubbscope on the npm registry, as well as established libraries likeaxios,zod, andmsw. These are standard dependencies for the tool's intended purpose. - [PRIVILEGE_ESCALATION]: Documentation for the
kubb agent startcommand mentions a--allow-allflag, which is clearly labeled with a security warning regarding file system access permissions. - [DATA_EXPOSURE]: The skill includes a dedicated section on telemetry, explaining what data is collected (anonymous usage statistics) and what is explicitly excluded (secrets, API keys, and source code), along with instructions on how to disable it using standard environment variables like
DO_NOT_TRACK.
Audit Metadata