byted-volcengine-tosutil
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the
tosutilbinary for various platforms (Linux, macOS, Windows) from the official Volcano Engine infrastructure (volces.com). These downloads are directed to the vendor's own verified access points. - [COMMAND_EXECUTION]: The Python scripts (scripts/main.py and scripts/tosutil_service.py) facilitate the execution of the
tosutilCLI tool on the local system using thesubprocessmodule. The implementation uses list-based argument passing which mitigates common command injection risks. - [SAFE]: The skill includes robust security features to protect user data. The scripts implement a redaction mechanism (mask_sensitive_text) to ensure that Access Keys, Secret Keys, and Security Tokens are masked in command previews and logs. Furthermore, the skill enforces a safety protocol for destructive operations like 'rm', requiring explicit user confirmation via a flag before execution.
Audit Metadata