qbo
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the 'qbo' CLI tool from the vendor's official GitHub repositories using standard package managers (Homebrew, Scoop, Go) and direct binary downloads. These sources are consistent with the skill's authorship.
- [COMMAND_EXECUTION]: The execution environment is restricted to the 'qbo' CLI tool via the 'allowed-tools' configuration, implementing the principle of least privilege by preventing the agent from running arbitrary shell commands.
- [SAFE]: Credential management is handled securely by encouraging the use of system-native keychains (such as macOS Keychain or Windows Credential Manager) for OAuth secrets and tokens, avoiding plain-text storage in configuration files.
- [SAFE]: The documentation includes proactive safety guidelines, such as warnings against automated retries for email sending operations and the use of dry-run flags to preview destructive changes before execution.
Audit Metadata