supsub-auth
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill provides an installation method that downloads a shell script from the vendor's GitHub repository and pipes it to bash for execution (
curl -fsSL https://raw.githubusercontent.com/SupSub-AI/supsub-cli/master/scripts/install.sh | bash). - [EXTERNAL_DOWNLOADS]: The skill documents how to install the
@supsub/clipackage using the NPM or Pnpm package managers. - [CREDENTIALS_UNSAFE]: The skill describes the management of OAuth access and refresh tokens stored in the user's home directory (
~/.supsub/config.json). It provides instructions for the agent to help the user through the authentication flow if credentials are missing or expired.
Audit Metadata