inconvo-cli
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The CLI tool manages a local development environment by spawning subprocesses for Docker Compose and Cloudflare Wrangler (wrangler dev).
- [EXTERNAL_DOWNLOADS]: Fetches Docker images from the vendor's GitHub Container Registry and executes npx wrangler from the official npm registry.
- [REMOTE_CODE_EXECUTION]: Instructions guide the agent to use npx inconvo@latest to run the latest version of the CLI tool from npm.
- [CREDENTIALS_UNSAFE]: The tool handles API keys and database credentials for its development environment. It follows best practices by masking secrets in command output and storing configuration in files intended to be excluded from source control.
Audit Metadata