byted-viking-search-knowledgebase

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The script scripts/viking_search.py reads the file /root/.openclaw/.env to load environment variables. This access is restricted to a specific allowlist of keys (DATABASE_VIKING_APIG_URL, DATABASE_VIKING_APIG_KEY, DATABASE_VIKING_PROJECT, DATABASE_VIKING_COLLECTION) required for the skill's operation.
  • [COMMAND_EXECUTION]: The skill functions by executing a local Python script (scripts/viking_search.py) with command-line arguments. This script acts as a client for the Viking knowledge base API.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to external API endpoints using the requests library. These requests target the Volcengine/Viking services to perform semantic searches and retrieve document metadata as described in the documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 06:16 AM
Security Audit — agent-trust-hub — byted-viking-search-knowledgebase