jimeng-ai
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with the official VolcEngine API endpoint (open.volcengineapi.com) using standard AWS Signature V4 authentication.
- [SAFE]: Authentication credentials such as Access Keys and Secret Keys are handled through environment variables (VOLCENGINE_AK and VOLCENGINE_SK), avoiding any hardcoding of sensitive secrets.
- [SAFE]: The implementation features a sanitizePath utility that effectively prevents directory traversal attacks by validating and cleaning output paths before file system operations.
- [SAFE]: All dependencies are standard, well-maintained libraries from the official NPM registry, and the source code contains no signs of obfuscation, persistence mechanisms, or unauthorized data exfiltration.
Audit Metadata