upstash-box-cli
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed documentation for the
boxCLI, a legitimate tool provided by the vendor (Upstash) for managing remote sandboxed environments. - [EXTERNAL_DOWNLOADS]: The skill guides the installation of the
@upstash/box-clipackage from the official NPM registry, which is the standard distribution method for this tool. - [COMMAND_EXECUTION]: The skill describes the use of a CLI tool to execute commands, manage files, and automate browser tasks within a remote workspace. All execution is clearly scoped to a sandboxed container rather than the local host.
- [CREDENTIALS_UNSAFE]: Instructions for authentication use standard practices, such as setting environment variables with placeholders (e.g.,
UPSTASH_BOX_API_KEY=box_...), and providing warnings about keeping secrets out of command-line arguments to avoid shell history exposure.
Audit Metadata