byted-seedream-image-generate

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides a Python script scripts/seedream_image_generate.py which contains the logic for interacting with the image generation service via a command-line interface.
  • [EXTERNAL_DOWNLOADS]: The script performs network requests to https://ark.cn-beijing.volces.com/api/v3 (Volcano Engine API) to generate images. These requests are directed at the vendor's own infrastructure and are necessary for the skill's primary functionality.
  • [CREDENTIALS_UNSAFE]: The script scripts/seedream_image_generate.py contains code that prints the full HTTP request headers, including the Authorization bearer token (which contains the API key), to the standard output during the generation process (lines 135-144). This practice can lead to the exposure of sensitive credentials in execution logs, terminal history, or agent monitoring systems.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 03:15 PM