Atlas / Skills / alibaba / zvec

zvecCAUTION

skills/alibaba/zvec

Agent skill by alibaba · agent skills · db · embedded · Audited 2026-10-07

⚑ Report / re-scan Source ↗

A lightweight, lightning-fast, in-process vector database

Verdict

CAUTION

Grade

B

Trust score

83 /100

Version

—

Hosts

—

License

Apache-2.0

Stars

16,070

01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

English | 中文

🚀 Quickstart | 🏠 Home | 📚 Docs | 📊 Benchmarks | 🔎 DeepWiki |

Read from source at commit 4378d838f0d9OBSERVED · 2026-10-07

02

Install

Commands as the repository documents them. They are shown, not run.

git clone --recursive https://github.com/alibaba/zvec.git

pip install -e ".[dev]"

git clone [email protected]:alibaba/zvec.git

03

Trust audit

CAUTIONgrade B · trust 83/100 Install with care. The audit found things worth knowing before you trust its output.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (2 observation(s))
Network: declared (4 observation(s))
Shell: declared (1 observation(s))
Dependencies: pinned
Secrets in source: none-found

Findings (15)

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95

python/zvec/tool/util.py:50

return importlib.import_module(module)

MEDIUMInventory / provenance · skill.no_skill_md · CWE-1104

Why it matters. no SKILL.md at the audited path

Fix. a skill without its instruction file cannot be reviewed as one

LOWInventory / provenance · inv.hidden_file · CWE-1104

.clang-format

.clang-format

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.clang-tidy

.clang-tidy

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.gitmodules

.gitmodules

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

.pre-commit-config.yaml

.pre-commit-config.yaml

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.hidden_file · CWE-1104

src/db/index/column/fts_column/gen/.clang-tidy

.clang-tidy

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

python/tests/test_fts_query.py:139

restored = pickle.loads(data)

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load

LOWCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

python/tests/test_fts_query.py:170

restored = pickle.loads(data)

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load

LOWCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

python/tests/test_fts_query.py:185

restored = pickle.loads(data)

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load

LOWCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

python/tests/test_hnsw_contiguous_memory.py:206

restored = pickle.loads(pickle.dumps(original))

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load

LOWCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

python/tests/test_params.py:79

for value in (param, param.clone(), pickle.loads(pickle.dumps(param))):

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/db/index/column/fts_column/gen_parser.sh:8

java -jar ../../../../deps/thirdparty/antlr/antlr-4.8-complete.jar -Dlanguage=Cpp -package antlr4 FtsLexer.g4 FtsParser.g4 -o gen

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

src/db/sqlengine/antlr/gen_parser.sh:8

java -jar ../../../../../thirdparty/antlr/antlr-4.8-complete.jar -Dlanguage=Cpp -package antlr4 SQLLexer.g4 SQLParser.g4 -o gen

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

.github/workflows/scripts/run_vdb.sh:86

curl --data-binary @prom_metrics.txt "http://47.93.34.27:9091/metrics/job/benchmarks-${CASE_TYPE}/case_type/${CASE_TYPE}/quantize_type/${QUANTIZE_TYPE}" -v

Gates applied: no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha 4378d838f0d9full audit observations/trust-audit/skill/alibaba__zvec.json · Report an issue / request a re-scan

04

Audit history

Every audit this skill has had.

Date	Source	Verdict	Grade	Score	Change
2026-10-07	`4378d838f0d9`	CAUTION	B	83	first audit

05

Questions

What does the zvec skill do?

A lightweight, lightning-fast, in-process vector database

Is zvec safe to install?

With care. The audit graded it B (83/100) and found 15 things worth knowing before you trust this skill, listed below with the exact line each was found on.

What can zvec access on my machine?

The audit observed that it reaches the network, runs shell commands and reads or writes files. Each of those is consistent with what it says it does. Secrets in the source: none found.

How current is this page?

The grade is for one exact copy of the source (4378d838f0d9), read on 2026-10-07. The repository is watched, and a new audit runs when it changes — this is the first audit.