Skills
Navigate
skills/bytedance/agentkit-samples/byted-vms-secret-number/Gen Agent Trust Hub

byted-vms-secret-number

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local Python scripts to perform lifecycle management of AXB/AXN privacy number bindings.
  • Evidence: SKILL.md defines command execution patterns calling python3 scripts/secret_number.py.
  • [SAFE]: Authentication secrets are handled via environment variables and are used exclusively to sign requests to the vendor's service.
  • Evidence: scripts/_topclient.py retrieves VOLC_ACCESS_KEY and VOLC_SECRET_KEY from the environment to generate Volc V4 signatures.
  • [SAFE]: Network activity is restricted to official Bytedance/Volcano Engine domains or user-configured enterprise gateways.
  • Evidence: DEFAULT_HOST is set to cloud-vms.volcengineapi.com in scripts/_topclient.py.
  • [SAFE]: No malicious patterns such as prompt injection, obfuscation, or unauthorized data exfiltration were detected across the analyzed files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 06:16 AM
Security Audit — agent-trust-hub — byted-vms-secret-number