byted-escloud

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill enables management of Volcano Engine ESCloud and CloudSearch services using official vendor resources, including the volcengine-python-sdk. All external dependencies are well-known, versioned packages from official registries.
  • [SAFE]: Sensitive credentials such as Access Keys, Secret Keys, and passwords are managed through environment variables (e.g., VOLCENGINE_ACCESS_KEY, ESCLOUD_PASSWORD). No hardcoded secrets or unsafe credential storage patterns were detected.
  • [SAFE]: The skill incorporates strong safety guardrails, explicitly instructing the agent to require user confirmation before executing high-impact or destructive operations such as cluster deletion, password resets, or bulk data mutations.
  • [SAFE]: Network operations are purpose-built for interacting with Volcano Engine infrastructure and Elasticsearch/OpenSearch data planes. The ark_shim.py and sdk_shim.py components are designed to communicate with official service endpoints.
  • [SAFE]: No evidence of prompt injection, obfuscation, or persistence mechanisms was found. The instructions and scripts are consistent with the stated purpose of managing cloud search clusters.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 03:13 AM