byted-tos-doc-process

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements document processing using the official Volcengine TOS Python SDK (tos), which is appropriate for a skill authored by Bytedance.
  • [SAFE]: Sensitive credentials such as TOS_ACCESS_KEY and TOS_SECRET_KEY are retrieved from environment variables, following secure credential management practices.
  • [SAFE]: Document processing logic relies on pre-signed URLs with specific x-tos-* query parameters, adhering to the security model of the Volcengine TOS platform.
  • [SAFE]: Network operations are confined to Volcengine TOS endpoints or user-provided URLs for debugging, consistent with the skill's utility as a document conversion and preview tool.
  • [SAFE]: The use of Base64 encoding for x-tos-save-bucket and x-tos-save-object parameters in doc_preview_params.py is a documented requirement of the TOS API and not a malicious obfuscation attempt.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 03:15 PM