veo
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation and configuration from the vendor's official domain at
pixazo.ai/models/veo.md. - [COMMAND_EXECUTION]: The skill provides
curlcommand examples and suggests saving the API key to~/.pixazo/api-keywithchmod 600permissions. This is standard practice for CLI-based tools to manage authentication securely locally. - [REMOTE_CODE_EXECUTION]: The skill includes instructions to potentially add more skills via
npx skills add Pixazo-AI/skills, which is the intended mechanism for managing the vendor's skill library. - [CREDENTIALS_SAFE]: The skill correctly instructs the user to store their private API key in a local file or environment variable rather than hardcoding it, following security best practices.
Audit Metadata