volcengine-rds-mysql

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides a CLI wrapper for the official volcengine-python-sdk to manage RDS MySQL resources on ByteDance's Volcengine cloud platform.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill utilizes VOLCENGINE_ACCESS_KEY and VOLCENGINE_SECRET_KEY environment variables for authentication. These credentials are used exclusively to communicate with official Volcengine API endpoints as defined in the ByteDance SDK, which is a standard and expected practice for cloud management tools.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from cloud API responses which are then processed by the agent. While this constitutes an ingestion point for external data, the source (official cloud API) is a trusted channel for this specific management use case, and the inherent risk is low.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 03:15 PM