Is dmitriyg228/vexa safe?
Yes. dmitriyg228/vexa is safe to install. Oathe's behavioral security audit gave the vexa skill by dmitriyg228 a trust score of 92/100 with 3 findings, none critical or high.
https://github.com/openclaw/skills/tree/main/skills/dmitriyg228/vexa
Is dmitriyg228/vexa safe to install?
This is a legitimate skill for managing Vexa meeting bots and transcripts with Google Meet and Microsoft Teams. The skill contains expected executable code for API interaction and communicates with legitimate Vexa services. No malicious behavior or security vulnerabilities detected.
What security issues were found in dmitriyg228/vexa?
Category Scores
Findings (3)
LOW Executable JavaScript Code Present -15 ▶
The skill contains several JavaScript files in the scripts directory that serve as CLI tools for Vexa API interaction. This is expected functionality but represents executable code.
LOW External API Communication -10 ▶
The skill communicates with external Vexa API endpoints at api.cloud.vexa.ai. This is legitimate functionality but involves external data transmission.
INFO API Key Handling in Chat -5 ▶
The skill offers to accept API keys via chat input as an alternative to manual setup. While the user can choose manual setup instead, this represents a potential security consideration.
Should I install dmitriyg228/vexa?
Oathe's verdict for dmitriyg228/vexa is SAFE with a trust score of 92/100. Recommendation: Install.