byted-volcengine-topology-builder

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run to orchestrate the pipeline between internal scripts, including asset dumping, topology building, and graph rendering.
  • [EXTERNAL_DOWNLOADS]: The skill includes logic to install the Graphviz visualization library from official system repositories (using apt, brew, yum, etc.) to support its primary function of generating topology images.
  • [COMMAND_EXECUTION]: The package installation logic utilizes the sudo command to acquire necessary permissions for managing system-level dependencies.
  • [SAFE]: The skill processes structured cloud resource data via official APIs.
  • Ingestion points: Cloud resource metadata retrieved in dump_account_assets.py and processed in build_topology_from_account_assets.py.
  • Boundary markers: Assets are processed as structured JSON; the skill assumes valid metadata from the Volcengine provider.
  • Capability inventory: The skill performs file system operations in save_topology.py and executes rendering commands in render_topology_graph.py.
  • Sanitization: Data is parsed as structured JSON, though specific sanitization for asset names before interpolation into the visualization labels is minimal.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 06:17 AM
Security Audit — agent-trust-hub — byted-volcengine-topology-builder