byted-skill-demo
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
volcengineandaiohttplibraries.volcengineis the official Python SDK for ByteDance's cloud service (Volcengine), which aligns with the skill author's organization.aiohttpis a standard, reputable library for asynchronous network operations. - [COMMAND_EXECUTION]: The skill uses a command-line interface to execute a local Python script
scripts/search.pywhich takes a search query as an argument. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits a potential surface for indirect prompt injection by processing external data from a knowledge base.
- Ingestion points: Data retrieved from the Viking Knowledge Base via the
scripts/search.pyscript. - Boundary markers: The instructions do not define explicit boundary markers or delimiters for the knowledge base content.
- Capability inventory: The skill utilizes script execution capabilities which likely involve network requests to fetch the knowledge base data.
- Sanitization: There is no evidence of sanitization or filtering logic described for the external data before it is presented to the agent.
Audit Metadata