byted-escloud
Pass
Audited by Gen Agent Trust Hub on May 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enables management of Volcano Engine ESCloud and CloudSearch services using official vendor resources, including the
volcengine-python-sdk. All external dependencies are well-known, versioned packages from official registries. - [SAFE]: Sensitive credentials such as Access Keys, Secret Keys, and passwords are managed through environment variables (e.g.,
VOLCENGINE_ACCESS_KEY,ESCLOUD_PASSWORD). No hardcoded secrets or unsafe credential storage patterns were detected. - [SAFE]: The skill incorporates strong safety guardrails, explicitly instructing the agent to require user confirmation before executing high-impact or destructive operations such as cluster deletion, password resets, or bulk data mutations.
- [SAFE]: Network operations are purpose-built for interacting with Volcano Engine infrastructure and Elasticsearch/OpenSearch data planes. The
ark_shim.pyandsdk_shim.pycomponents are designed to communicate with official service endpoints. - [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms was found. The instructions and scripts are consistent with the stated purpose of managing cloud search clusters.
Audit Metadata