volcengine-documentation
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to docs-api.cn-beijing.volces.com to retrieve documentation content. This domain belongs to the vendor (ByteDance/Volcengine) and is used for the tool's core functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the Volcengine API for processing by the agent.
- Ingestion points: API response content in scripts/volcengine_docs.py.
- Boundary markers: None present in the prompt instructions.
- Capability inventory: Subprocess-based execution of the script which uses the requests library for network access to volces.com.
- Sanitization: The skill does not perform sanitization on the retrieved documentation content.
Audit Metadata