byted-las-audio-extract-and-split

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the @volcengine/las-cli package from the NPM registry. This is a vendor-owned package required to interact with the Volcano Engine infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided media files and parameters.
  • Ingestion points: Media files uploaded via las-cli tos upload and configuration data in params.json (SKILL.md).
  • Boundary markers: None specified for the data ingestion process.
  • Capability inventory: File system access for reading inputs, writing results (result.md), and network operations via the vendor's CLI tool (las-cli).
  • Sanitization: The skill relies on the underlying las-cli tool and processing engine to handle media content safely.
  • [COMMAND_EXECUTION]: The skill executes various las-cli commands to manage files and process audio. These are standard operations for the skill's stated purpose of audio manipulation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 03:16 PM