volcengine-landing-zone
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill executes Python scripts locally using Terraform's
local-execfeature to perform administrative tasks like service activation and account tagging. This is a standard pattern for cloud automation and is performed within a controlled workspace environment. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-defined strings for resource naming. Potential injection vulnerabilities are mitigated through strict regular expression validation at the infrastructure-as-code level, ensuring inputs remain within safe character sets.
- [DATA_EXPOSURE_AND_EXFILTRATION]: Network communication is conducted with official Volcengine API endpoints (e.g.,
volcengineapi.com). These operations are restricted to the primary functionality of the skill and target only trusted vendor infrastructure.
Audit Metadata