volcengine-sdk-generator
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/rg_rank.pyinvokes theripgreputility to search local API records. The command is constructed safely using an argument list and escaped patterns, preventing command injection. - [EXTERNAL_DOWNLOADS]: API metadata and swagger definitions are retrieved from Volcengine's official developer infrastructure (
api.volcengine.com). These downloads are necessary for generating accurate code samples and are directed at the author's trusted domain. - [SAFE]: Credential handling instructions in the reference documentation follow industry standards, advising against hardcoded secrets and promoting the use of environment variables and secure credential providers.
- [SAFE]: The skill's scripts utilize Python's standard library for network and system operations, and no unauthorized file access or suspicious data exfiltration patterns were detected.
Audit Metadata