byted-bytehouse-slow-query
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
slow_query_analyzer.pyscript downloads components from thevolcengineorganization's GitHub repository. As the skill is authored by ByteDance and Volcano Engine is their official cloud brand, these are recognized as legitimate vendor resources. - [REMOTE_CODE_EXECUTION]: The analysis script uses
uvxto execute an MCP server directly from a remote Git repository (https://github.com/volcengine/mcp-server@main). This is the primary mechanism for establishing communication with the ByteHouse database. - [COMMAND_EXECUTION]: The skill instructions and scripts use shell commands to manage environment variables for database credentials and to invoke the
uvanduvxtools for code execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from ByteHouse database logs (
query_log). While this creates an ingestion surface for potentially untrusted data (e.g., query text from other users), the skill's capabilities are limited to reading logs and writing diagnostic reports to local JSON files in theoutput/directory, minimizing exploitation risks.
Audit Metadata