byted-tos-image-process
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a set of official utility scripts for Bytedance's TeraObjectStore (TOS), enabling standard image processing operations such as resizing, format conversion, and watermarking.
- [EXTERNAL_DOWNLOADS]: The skill correctly specifies the official 'tos' Python SDK in its requirements.txt file, which is necessary for interacting with the Volcengine TOS service.
- [COMMAND_EXECUTION]: The provided Python scripts serve as safe wrappers for the TOS SDK methods, allowing an agent to perform image transformations through the official API without executing unauthorized system commands.
- [DATA_EXFILTRATION]: All network and file operations are aligned with the skill's primary purpose of processing images stored in TOS buckets. No suspicious data exfiltration or unauthorized network activity was detected.
- [CREDENTIALS_UNSAFE]: The skill uses environment variables for sensitive credentials like Access Keys and Secret Keys, and provides guidance on using temporary STS tokens, following recommended security practices for cloud service authentication.
Audit Metadata