byted-seedream-image-generate
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a Python script
scripts/seedream_image_generate.pywhich contains the logic for interacting with the image generation service via a command-line interface. - [EXTERNAL_DOWNLOADS]: The script performs network requests to
https://ark.cn-beijing.volces.com/api/v3(Volcano Engine API) to generate images. These requests are directed at the vendor's own infrastructure and are necessary for the skill's primary functionality. - [CREDENTIALS_UNSAFE]: The script
scripts/seedream_image_generate.pycontains code that prints the full HTTP request headers, including theAuthorizationbearer token (which contains the API key), to the standard output during the generation process (lines 135-144). This practice can lead to the exposure of sensitive credentials in execution logs, terminal history, or agent monitoring systems.
Audit Metadata