byted-las-audio-convert
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates with official vendor endpoints (
operator.las.cn-beijing.volces.com) owned by ByteDance's Volcano Engine. - [SAFE]: No hardcoded credentials were found; authentication is managed through environment variables or a local
env.shfile, which is a standard development practice. - [SAFE]: The Python script implements proactive security measures, including a
_validate_urlfunction that checks for private IP ranges and restricts protocols to prevent SSRF vulnerabilities. - [SAFE]: The skill's primary functionality is encapsulated in a remote API call, with no local command execution or unauthorized file system modifications detected.
Audit Metadata