volcengine-sdk-generator

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/rg_rank.py invokes the ripgrep utility to search local API records. The command is constructed safely using an argument list and escaped patterns, preventing command injection.
  • [EXTERNAL_DOWNLOADS]: API metadata and swagger definitions are retrieved from Volcengine's official developer infrastructure (api.volcengine.com). These downloads are necessary for generating accurate code samples and are directed at the author's trusted domain.
  • [SAFE]: Credential handling instructions in the reference documentation follow industry standards, advising against hardcoded secrets and promoting the use of environment variables and secure credential providers.
  • [SAFE]: The skill's scripts utilize Python's standard library for network and system operations, and no unauthorized file access or suspicious data exfiltration patterns were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 02:39 AM
Security Audit — agent-trust-hub — volcengine-sdk-generator