pexo-agent

Warn

Audited by Runlayer on Mar 13, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
87%
Files
11
Flagged
9
Chunks
15
Flagged Files (9)
pexo-agent/scripts/pexo-project-get.shMEDIUM
87.1%

Tool passed security scan

Context Poisoning

pexo-agent/references/TROUBLESHOOTING.mdMEDIUM
84.7%

Tool passed security scan

Prompt Injection

pexo-agent/scripts/pexo-upload.shMEDIUM
82.0%

Risky tool definition detected

mime_supported_for_asset_type "$mime_type" "$asset_type"; then finalize_mime_type="" fi # Phase 1: get upload credential cred=$(pexo_post "/api/biz/projects/${pid}/assets/upload-credential" \ "{\"file_name\":\"$filename\",\"file_size\":$filesize}") upload_url=$(echo "$cred" | jq -r '.uploadUrl') asset_id=$(echo "$cred" | jq -r '.assetId') storage_path=$(echo "$cred" | jq -r '.storagePath') [[ -n "$upload_url" && "$upload_url" != "null" ]] || { echo "Error: failed to get upload credential" >&2; e

pexo-agent/scripts/pexo-asset-get.shMEDIUM
81.6%

Data Exfiltration

Shadow Persistence

pexo-agent/references/SETUP-CHECKLIST.mdMEDIUM
78.3%

Data Exfiltration

Supply Chain Compromise

pexo-agent/scripts/pexo-doctor.shMEDIUM
76.0%

Data Exfiltration

pexo-agent/SKILL.mdLOW
74.6%

Data Exfiltration

Context Poisoning

Supply Chain Compromise

pexo-agent/scripts/pexo-chat.shLOW
65.0%

Tool passed security scan

pexo-agent/scripts/_common.shLOW
59.5%

Tool passed security scan

Passed Files (2)Click to expand
pexo-agent/scripts/pexo-project-create.shOK
17.1%

Tool passed security scan

pexo-agent/scripts/pexo-project-list.shOK
12.5%

Tool passed security scan

Audit Metadata
Max File Score
87%
Classification
KNOWN_SERVER_ALL_UNKNOWN
Files Scanned
11
Files Flagged
9
Chunks Analyzed
15
Analyzed
Mar 13, 2026, 10:32 PM
Security Audit — runlayer — pexo-agent