byted-data-deepresearch-structured2markdown
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the 'volcengine-python-sdk' (version >= 4.0.43) from the standard Python Package Index (PyPI). This is an official SDK provided by the vendor for interacting with their cloud services.
- [CREDENTIALS_UNSAFE]: The skill identifies the need for Volcengine AccessKey and SecretKey. If these are missing from the environment, it prompts the user to provide them. It includes specific safety requirements forbidding the hardcoding of these credentials in scripts or documents, adhering to security best practices for credential handling.
- [DATA_EXFILTRATION]: The skill uploads local Excel and CSV files to the official Volcengine API domain (data-agent.volcengineapi.com) for analysis. As the skill is authored by ByteDance and communicates with ByteDance-owned infrastructure to fulfill its stated purpose, this is classified as expected vendor functionality.
- [COMMAND_EXECUTION]: To ensure environment stability, the skill executes shell commands to set up a Python virtual environment and locate its internal processing scripts. It uses these local paths to run the data conversion logic.
Audit Metadata