byted-tos-doc-process
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements document processing using the official Volcengine TOS Python SDK (
tos), which is appropriate for a skill authored by Bytedance. - [SAFE]: Sensitive credentials such as
TOS_ACCESS_KEYandTOS_SECRET_KEYare retrieved from environment variables, following secure credential management practices. - [SAFE]: Document processing logic relies on pre-signed URLs with specific
x-tos-*query parameters, adhering to the security model of the Volcengine TOS platform. - [SAFE]: Network operations are confined to Volcengine TOS endpoints or user-provided URLs for debugging, consistent with the skill's utility as a document conversion and preview tool.
- [SAFE]: The use of Base64 encoding for
x-tos-save-bucketandx-tos-save-objectparameters indoc_preview_params.pyis a documented requirement of the TOS API and not a malicious obfuscation attempt.
Audit Metadata