volcengine-sdk-generator
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches API metadata and Swagger specifications from official Volcengine endpoints (
api.volcengine.com). It also retrieves technical documentation from the vendor's official GitHub repositories (github.com/volcengine). These are legitimate vendor resources used for providing accurate SDK generation. - [INDIRECT_PROMPT_INJECTION]: The skill processes natural language user queries alongside external data (API responses and documentation retrieved via
WebFetch) to generate code. While there are no explicit delimiters or boundary markers mentioned to isolate external content, the risk is minimal as the ingestion is scoped to official vendor documentation. - [DATA_EXPOSURE]: The generated code templates follow security best practices by instructing users to load sensitive credentials like
VOLCENGINE_ACCESS_KEYandVOLCENGINE_SECRET_KEYfrom environment variables rather than hardcoding them.
Audit Metadata