The Agent Skills Directory

[SAFE]: The skill manages Volcano Engine resources using official SDKs and standard practices. No malicious patterns, obfuscation, or unauthorized data access were detected.
[COMMAND_EXECUTION]: The script scripts/control.py uses subprocess.run to execute the internal scripts/contextsearch_cli.py. The execution uses a list of arguments and sys.executable without shell=True, which is a secure method for executing internal scripts that prevents command injection.
[CREDENTIALS_UNSAFE]: The skill manages authentication securely via environment variables (VOLCENGINE_AK, VOLCENGINE_SK, CTX_SEARCH_API_KEY). It does not contain hardcoded credentials, and the config.json.template correctly uses placeholders.
[EXTERNAL_DOWNLOADS]: The skill interacts with official ByteDance and Volcano Engine endpoints (volcengine.com, volces.com). These are recognized vendor resources for this skill and do not represent a security risk.

byted-contextsearch-operator