byted-vms-configure
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were detected. The skill serves as a legitimate tool for interacting with the author's cloud communication platform.
- [COMMAND_EXECUTION]: The skill executes local Python scripts to interact with the Volcengine API. It correctly sanitizes user-provided parameters like phone numbers through standard URL encoding before transmission.
- [CREDENTIALS_UNSAFE]: Secret management follows best practices by retrieving API keys and secrets from environment variables. The authentication logic uses standard HMAC-SHA256 (Volc V4) signing for API requests.
- [EXTERNAL_DOWNLOADS]: The skill is self-contained and does not download or execute any remote code or third-party packages. It relies entirely on the Python standard library.
Audit Metadata