byted-volcengine-topology-builder
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto orchestrate the pipeline between internal scripts, including asset dumping, topology building, and graph rendering. - [EXTERNAL_DOWNLOADS]: The skill includes logic to install the Graphviz visualization library from official system repositories (using
apt,brew,yum, etc.) to support its primary function of generating topology images. - [COMMAND_EXECUTION]: The package installation logic utilizes the
sudocommand to acquire necessary permissions for managing system-level dependencies. - [SAFE]: The skill processes structured cloud resource data via official APIs.
- Ingestion points: Cloud resource metadata retrieved in
dump_account_assets.pyand processed inbuild_topology_from_account_assets.py. - Boundary markers: Assets are processed as structured JSON; the skill assumes valid metadata from the Volcengine provider.
- Capability inventory: The skill performs file system operations in
save_topology.pyand executes rendering commands inrender_topology_graph.py. - Sanitization: Data is parsed as structured JSON, though specific sanitization for asset names before interpolation into the visualization labels is minimal.
Audit Metadata