byted-kickart-overseas-viral-replicator
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/kickart.pyspawns a background process usingsubprocess.Popento monitor video generation progress. The command is strictly limited to running the tool's own 'watch' function with a task ID returned from the server. - [EXTERNAL_DOWNLOADS]: The skill requires installation of third-party Python packages listed in
scripts/requirements.txt. It also communicates with external endpoints atbyteplus.com,bytepluses.com, andvolcengine.comfor processing tasks. These are official domains associated with the skill's author, ByteDance. - [DATA_EXFILTRATION]: The skill handles user credentials (AK/SK) and uploads media to cloud storage. This behavior is documented and directed exclusively to the service provider's infrastructure.
- [PROMPT_INJECTION]: The skill implements a mandatory multi-step validation process for user intent and data input, which enforces expected behavior and prevents prompt manipulation.
Audit Metadata