byted-cloudsearch
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the official
volcengine-python-sdkto manage cloud resources, which is expected behavior for its stated purpose as a Volcano Engine utility. - [SAFE]: Destructive operations such as deleting instances, indices, or documents require an explicit
--confirmflag and are governed by instructions requiring user confirmation. - [PROMPT_INJECTION]: The skill processes data from external Elasticsearch/OpenSearch endpoints, creating a potential surface for indirect instructions if those endpoints contain untrusted data.
- Ingestion points:
scripts/data.pyviasearch,doc_get, andinfocommands. - Boundary markers: Output is returned as raw JSON without explicit delimiters to protect the agent from embedded instructions.
- Capability inventory: Includes cluster management (lifecycle) and data operations (CRUD/search) via
scripts/control.pyandscripts/data.py. - Sanitization: Data retrieved from the search engine is passed directly to the agent without filtering.
Audit Metadata