byted-vms-cdr-record
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides command-line interfaces via
scripts/cdr_record.pyto interact with Volcengine Cloud APIs. These commands are used for legitimate business purposes like querying call records and fetching recording URLs. - [SAFE]: The skill uses standard authentication mechanisms (HMAC-SHA256 signing) for Volcengine APIs. All network traffic targets official ByteDance domains (
volcengineapi.com,volcvms.com). - [SAFE]: The file download functionality in
scripts/cdr_record.pyis user-initiated via the--save-toargument and includes path expansion for local storage.
Audit Metadata