cube
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified in the skill instructions or code examples.- [CREDENTIALS_UNSAFE]: The code examples for the REST API correctly utilize environment variables (
process.env.CUBE_API_TOKEN) for authentication, avoiding hardcoded secrets.- [COMMAND_EXECUTION]: The installation section provides standard commands usingnpx,npm, anddockerto set up the Cube environment, which are legitimate and expected for this developer-focused tool.- [EXTERNAL_DOWNLOADS]: The skill references the officialcubejs/cubeDocker image and usesnpxto fetch the standard CLI tool, which are trusted resources for the documented platform.
Audit Metadata