byted-sqlserver-instance-management
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill interacts with official Volcengine services using the volcengine-python-sdk. All network operations are targeted at well-known vendor endpoints for RDS instance management.
- [COMMAND_EXECUTION]: The skill utilizes a local helper script
scripts/call_rds_mssql.pyto perform specific management actions likelist-instancesanddescribe-db-accounts. This execution is restricted to predefined subcommands and is essential for the skill's primary function. - [SAFE]: Sensitive credentials such as access keys and secret keys are managed through environment variables rather than being hardcoded, which aligns with secure development standards.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to interpret natural language instructions to drive cloud management tasks. 1. Ingestion points: User natural language requests interpreted by the agent as defined in
SKILL.md. 2. Boundary markers: The instructions provide context for intent recognition but do not implement specific data delimiters. 3. Capability inventory: The skill can invoke thecall_rds_mssql.pyscript to make authenticated API calls to Volcengine cloud resources. 4. Sanitization: Parameters passed to the management script are validated using theargparselibrary, providing a layer of protection against command injection.
Audit Metadata