qveris-cli
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation suggests installation via a shell script hosted at
https://qveris.ai/cli/install. As this is the official domain of the skill author (qverisai), this is considered a standard distribution method for vendor-provided tooling. - [COMMAND_EXECUTION]: The skill instructs the agent to execute
qverisandnpx @qverisai/clicommands to interact with the QVeris service. These commands are local subprocesses used to discover and call APIs, which is the primary and intended purpose of the skill. - [CREDENTIALS_UNSAFE]: The documentation includes instructions for managing API keys, such as
qveris login --token "sk-xxx"and setting theQVERIS_API_KEYenvironment variable. These are standard practices for CLI authentication and do not involve hardcoded secrets or unsafe exposures.
Audit Metadata