byted-vms-aicall
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by the vendor (ByteDance) and facilitates interaction with official Volcengine APIs. All network communication is directed to cloud-vms.volcengineapi.com and related official domains.
- [COMMAND_EXECUTION]: The skill provides a Python CLI (scripts/aicall.py) to perform API actions. Analysis of the script shows it only uses standard libraries and performs legitimate API requests with no arbitrary command execution or shell injection risks.
- [CREDENTIALS_UNSAFE]: The skill documentation correctly manages cloud credentials (VOLC_ACCESS_KEY, VOLC_SECRET_KEY) using environment variables, following standard security practices for secret management in AI agent environments.
Audit Metadata