Versioned security assessment

Report ID: SA-6041E152

5/8/2026, 8:42:26 AM

pexoai-agent security assessment v46

Skill Security Certification Report

Audit History
Audit model: claude Historical report
Skill name
pexoai-agent
Version
v46
Maintainer
pexoai
Source
github.com/pexoai/pexo-skills/tree/main/skills/pexo-agent/
Coverage
13 Files scanned · 2,110 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Low

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

This skill is a legitimate video production tool that connects to the Pexo AI video API. All static findings are false positives. The tool uses shell scripts for local operations (file upload, project management) and makes API calls to a single trusted endpoint (pexo.ai). Credentials are only used for authenticating with the Pexo service. No malicious behavior, data exfiltration, or privilege escalation detected.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

13 Files scanned · 2,110 Lines analyzed

4 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 1 evidence location

Filesystem access

May read or write local files.

Observed in 1 evidence location

Env variables

May read values from the process environment.

Observed in 1 evidence location

External commands

May invoke commands or programs outside the Skill.

Observed in 1 evidence location

Capability review items (3)
Low
SKILL.md:9-10
Hardcoded API Endpoint
Network requests are made to hardcoded pexo.ai domain. This is expected for a third-party API integration.
Pexo is a legitimate video production service. All network traffic stays within the Pexo ecosystem. No calls to third-party or unknown endpoints.
Low
SKILL.md:30-35scripts/_common.sh:7-8
Config File Location
Scripts read configuration from ~/.pexo/config. This is a standard pattern for developer tools.
Reading user config files from ~/.pexo/ is standard for CLI tools. No security risk as this is user-owned configuration.
Low
SKILL.md:3-331
MD5 Hash Usage Flagged
Static analyzer flagged MD5 usage as 'weak cryptographic algorithm'. MD5 is used for content hashing/caching (ETag headers). This is not a security vulnerability for the skill's purpose.
MD5 for ETag/caching purposes does not create security risk in an API client tool context. Not used for password hashing or cryptographic operations.

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Low
scripts/_common.sh:223-414scripts/pexo-*.sh:1-178
Shell Command Usage in Scripts
Shell scripts use command substitution and external commands. Verified this is limited to calling the skill's own scripts (pexo-project-create.sh, pexo-upload.sh, pexo-chat.sh, pexo-project-get.sh, pexo-asset-get.sh) with hardcoded or validated arguments. No user-controlled command injection vectors found.
All shell script commands use hardcoded script names and validated arguments passed from the SKILL.md workflow. No eval() or dynamic command construction found.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: claude

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable