vexor-cli
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access behaviors were detected. The skill implements legitimate utility functionality for codebase navigation.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the 'vexor' package from the official Python Package Index (PyPI). This is a standard and expected mechanism for acquiring the necessary CLI tooling.
- [COMMAND_EXECUTION]: The skill executes the 'vexor' command with various flags to perform semantic searches. These commands are transparently documented and operate within the user-specified directory scope.
- [CREDENTIALS_UNSAFE]: The skill demonstrates a strong security posture by explicitly noting that sensitive credentials (like 'api_key') are rejected from project-local configuration files to prevent malicious repositories from hijacking user keys. It instead instructs users to use the 'vexor config' command for secure, global credential storage.
Audit Metadata