supercmo-setup
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx --yes github:SupercmoHQ/superCMO-skills loginto perform authentication. This downloads and executes a tool from the author's official GitHub repository, which is a standard method for CLI-based setup. - [COMMAND_EXECUTION]: Instructions include running shell commands for installation and authentication (
npx). These are standard operational procedures for the described utility and occur within the vendor's own ecosystem. - [DATA_EXPOSURE]: The skill guides users to manage API keys in
~/.supercmo/.env. This follows best practices for secret management by keeping credentials out of version control and within a dedicated configuration directory.
Audit Metadata