byted-tos-video-process
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified during analysis. The skill's behavior is consistent with its stated purpose of video metadata retrieval and snapshot extraction.
- [EXTERNAL_DOWNLOADS]: The skill requires the
tosPython library, which is the official SDK for Bytedance's TOS service. As a vendor-owned resource, this dependency is considered safe and appropriate for the skill's functionality. - [CREDENTIALS_UNSAFE]: Authentication is correctly handled via environment variables (
TOS_ACCESS_KEY,TOS_SECRET_KEY,TOS_SECURITY_TOKEN). The skill avoids hardcoding sensitive credentials and provides guidance on using short-lived session tokens.
Audit Metadata