byted-las-audio-convert
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches an SDK manifest and a Python package (las_sdk) from Volcengine's official servers (volces.com) during environment initialization.
- [COMMAND_EXECUTION]: The skill uses shell scripts to automate environment setup, format verification, and task execution. It invokes tools such as lasutil, ffprobe, and jq to process data locally and interact with the remote conversion service.
- [DYNAMIC_EXECUTION]: The initialization script dynamically installs the las_sdk library using pip from a vendor-controlled URL to ensure the environment is up to date.
- [INDIRECT_PROMPT_INJECTION]: The skill accepts user-defined conversion parameters (extra_params), which are interpolated into a configuration file for the audio processor. This creates a surface for indirect prompt injection if the inputs contain malicious sequences intended to manipulate the underlying processing engine. * Ingestion points: User-specified parameters for sample rate, bitrate, and channels in SKILL.md. * Boundary markers: None identified within the skill's wrapper logic. * Capability inventory: The skill can read local files, upload them to cloud storage, and execute processing tasks via lasutil. * Sanitization: Validation is primarily limited to file extension checks; input parameter sanitization is deferred to the underlying SDK and service.
Audit Metadata