vulnetix/pix-ai-coding-assistant · skills/vex-publish/SKILL.md
vex-publish skillA
Generate OpenVEX / CycloneDX VEX attestations from `.vulnetix/memory.yaml` triage decisions, optionally sign with cosign, optionally upload to Vulnetix and post to a GitHub PR. Use when documenting triage decisions for supply-chain consumers, attaching VEX to a CycloneDX SBOM, or satisfying customer attestation requests.
Latest version
mdr add vulnetix/pix-ai-coding-assistant/vex-publish@git:20260904.974b690Exact content
mdr add vulnetix/pix-ai-coding-assistant/vex-publish@sha256:c964b7917e6b7445Badge
[](https://markdownregistry.com/a/art_xliykhbszhvfwgar)
0 badge views in 30 days
Versions
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4245 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
vulnetix/pix-ai-coding-assistant · 9 stars · license Apache-2.0 · pushed 2026-09-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_xliykhbszhvfwgar GET https://markdownregistry.com/api/v1/resolve?ref=vulnetix/pix-ai-coding-assistant/vex-publish GET https://markdownregistry.com/api/v1/blob/c964b7917e6b744561e17750a0eb4d4c6675b30195044ce99d4069fb9537a64c