Versioned security assessment

Report ID: SA-485805E4

6/30/2026, 6:23:44 AM

vaex security assessment v5

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
vaex
Version
v5
Maintainer
K-Dense-AI
Source
github.com/K-Dense-AI/claude-scientific-skills/tree/main/scientific-skills/vaex
Coverage
7 Files scanned · 3,725 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Medium

2 confirmed security findings require attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis reported many command-execution and blocker hits, but review found these are mostly Markdown fences, Vaex API examples, and placeholder filenames rather than executable skill code. The skill is documentation-only, but it includes cloud credential examples and a server command bound to 0.0.0.0, so publication should include a security warning.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

7 Files scanned · 3,725 Lines analyzed

3 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 3 evidence locations

Filesystem access

May read or write local files.

Observed in 3 evidence locations

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 1 evidence location

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (2)

RISK-001 Medium
references/io_operations.md:347-362
Inline Cloud Credential Examples
The S3 and GCS examples show credentials passed directly in code or by credential JSON path. The values are placeholders, but copied patterns can lead users to expose secrets in prompts, notebooks, or repositories.
The cited lines directly document secret-bearing parameters and a credential file path. They are placeholders, so the issue is risky guidance rather than confirmed credential disclosure.
RISK-002 Medium
references/io_operations.md:472-483
Remote Vaex Server Exposed on All Interfaces
The server example binds to 0.0.0.0 and then documents websocket access. Without authentication, TLS, and network restrictions, this can expose dataset access or computation to unintended clients.
The bind address and remote connection example are explicit. The documentation does not state an auth model, so risk depends on deployment context.
Needs review findings (1)
REVIEW-001 Low
references/performance.md:234-238references/io_operations.md:495-511
State File Loading Requires Trusted Inputs
The references document saving and loading Vaex state JSON files. No malicious payload is present, but users should load state files only from trusted sources.
The lines show state serialization workflows, but no evidence shows unsafe deserialization or code execution. The residual risk is trust-boundary guidance.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (1)
Low
SKILL.md:86-114references/core_dataframes.md:15-31references/data_processing.md:11-21
Markdown Code Fences Misclassified as Shell Execution
Most external command alerts point to Markdown backticks and Python examples. They are static documentation snippets, not skill code that executes shell commands.
The matched content is documentation in Markdown code blocks. No executable wrapper, script, hook, or command dispatcher was found in the reviewed files.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable