cnb-token
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to configure the user's local environment. It instructs the agent to execute
setx(on Windows) orexport(on Unix-like systems) to store credentials and usesgit configto set up a custom credential helper. - [PERSISTENCE]: To ensure authentication survives session restarts, the skill persists the access token via system-level environment variables and suggests modifications to shell profile files like
~/.bashrc. - [CREDENTIALS_MANAGEMENT]: The skill is designed to handle sensitive Personal Access Tokens. It includes explicit warnings to the user about the sensitivity of these tokens and provides instructions for revoking them if needed. It follows standard practices by storing secrets in environment variables rather than hardcoding them in scripts.
Audit Metadata