volcengine-cli
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the official
@volcengine/clipackage via npm and references the vendor's GitHub repository for manual binary downloads. - [COMMAND_EXECUTION]: The skill facilitates cloud infrastructure management via the
vecommand. It enforces safety protocols that require the agent to obtain user confirmation for any write or destructive operations (e.g., Create, Run, Delete, Stop) and suggests using dry-run validation where available. - [PROMPT_INJECTION]: The skill processes data from the Volcengine API at runtime, creating a potential surface for indirect prompt injection.
- Ingestion points: Documentation and search results are dynamically retrieved from
https://api.volcengine.comusing thescripts/fetch_swagger.pyandscripts/find_api.pyscripts. - Boundary markers: The skill does not define explicit delimiters or 'ignore' instructions when presenting the fetched API metadata to the agent, relying on the agent to parse natural language descriptions for parameter information.
- Capability inventory: The agent has access to
Bash,Read, andWritetools, enabling it to execute commands or modify local files based on the fetched data. - Sanitization: The Python scripts perform basic markdown escaping (e.g., pipe character replacement) and content truncation, but do not sanitize the semantic content of the API descriptions.
Audit Metadata