kubb

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of technical documentation, configuration examples, and installation guides for a legitimate development tool (Kubb).
  • [COMMAND_EXECUTION]: Documentation includes standard CLI commands for the tool, such as kubb generate and kubb init. These are presented as instructions for the user to execute within their development environment.
  • [EXTERNAL_DOWNLOADS]: The skill references numerous official packages from the @kubb scope on the npm registry, as well as established libraries like axios, zod, and msw. These are standard dependencies for the tool's intended purpose.
  • [PRIVILEGE_ESCALATION]: Documentation for the kubb agent start command mentions a --allow-all flag, which is clearly labeled with a security warning regarding file system access permissions.
  • [DATA_EXPOSURE]: The skill includes a dedicated section on telemetry, explaining what data is collected (anonymous usage statistics) and what is explicitly excluded (secrets, API keys, and source code), along with instructions on how to disable it using standard environment variables like DO_NOT_TRACK.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 06:40 AM