skills/upstash/skills/upstash-box-cli/Gen Agent Trust Hub

upstash-box-cli

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides detailed documentation for the box CLI, a legitimate tool provided by the vendor (Upstash) for managing remote sandboxed environments.
  • [EXTERNAL_DOWNLOADS]: The skill guides the installation of the @upstash/box-cli package from the official NPM registry, which is the standard distribution method for this tool.
  • [COMMAND_EXECUTION]: The skill describes the use of a CLI tool to execute commands, manage files, and automate browser tasks within a remote workspace. All execution is clearly scoped to a sandboxed container rather than the local host.
  • [CREDENTIALS_UNSAFE]: Instructions for authentication use standard practices, such as setting environment variables with placeholders (e.g., UPSTASH_BOX_API_KEY=box_...), and providing warnings about keeping secrets out of command-line arguments to avoid shell history exposure.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 05:29 AM