skills/bytedance/agentkit-samples/byted-vms-number-pool/Snyk

byted-vms-number-pool

Fail

Audited by Snyk on Jul 14, 2026

Risk Level: HIGH

Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

Insecure credential handling detected (high risk: 0.80). The doc explicitly allows/requests that users "直接把 AK/SK 告诉 agent" (VOLC_ACCESS_KEY / VOLC_SECRET_KEY), which means the agent/LLM would receive and potentially need to handle or embed API credentials verbatim for signing or requests.

Issues (1)

W007

HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata

Risk Level

HIGH

Analyzed

Jul 14, 2026, 06:17 AM

Issues

1

Security Audit — snyk — byted-vms-number-pool