byted-marketing-agent-inspiration-insight
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to locate its script files, manage a Python virtual environment, and execute its internal client script for data retrieval.
- [EXTERNAL_DOWNLOADS]: Installs the official
volcengine-python-sdkfrom the Python Package Index (PyPI) to support authenticated API communication. - [DATA_EXPOSURE_AND_EXFILTRATION]: Connects to
cdp-saas.cn-beijing.volcengineapi.comto fetch marketing data. User-provided AccessKey and SecretKey are used locally by the script to sign requests to this official Volcengine service endpoint. - [CREDENTIALS_UNSAFE]: Promptly requests necessary API credentials from the user when they are not detected in the environment, ensuring they are handled as variables for the runtime session rather than being hardcoded.
Audit Metadata