volcengine-sdk-generator
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by volcengine and communicates exclusively with official Volcengine API infrastructure (api.volcengine.com) to search for APIs and fetch Swagger documentation.
- [SAFE]: The integration references for Go, Python, Java, Node.js, and PHP follow industry best practices for credential management, specifically advising against hardcoding credentials and instead using environment variables or official credential providers (ECS role, OIDC, etc.).
- [SAFE]: The scripts
make_code.py,rg_rank.py, andsdk_info.pyperform standard HTTP GET/POST requests to fetch metadata and generate code templates. There is no evidence of command injection, data exfiltration, or persistence mechanisms. - [SAFE]: The use of
urllibfor network communication targets well-known official domains and does not include any obfuscation or suspicious redirection logic.
Audit Metadata