qveris-cli

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documentation suggests installation via a shell script hosted at https://qveris.ai/cli/install. As this is the official domain of the skill author (qverisai), this is considered a standard distribution method for vendor-provided tooling.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute qveris and npx @qverisai/cli commands to interact with the QVeris service. These commands are local subprocesses used to discover and call APIs, which is the primary and intended purpose of the skill.
  • [CREDENTIALS_UNSAFE]: The documentation includes instructions for managing API keys, such as qveris login --token "sk-xxx" and setting the QVERIS_API_KEY environment variable. These are standard practices for CLI authentication and do not involve hardcoded secrets or unsafe exposures.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 08:50 AM
Security Audit — agent-trust-hub — qveris-cli