jimeng-api-video-gen

Pass

Audited by Gen Agent Trust Hub on Feb 20, 2026

Risk Level: SAFE
Full Analysis
  • SAFE (SAFE): No malicious behavior, obfuscation, or unauthorized data access patterns were found. The skill follows standard security practices for cloud API integrations.
  • The volcengine_signer.py script correctly implements the IAM v4 signature protocol using only standard Python libraries (hashlib, hmac, datetime).
  • Credential management relies on environment variables (VOLC_ACCESSKEY, VOLC_SECRETKEY), which is the recommended practice for local development and CLI tools.
  • The AI agent instructions in SKILL.md and the rule files (.cursorrules, etc.) are purely functional, defining triggers and output formats for the video generation task without any prompt injection or bypass attempts.
  • The API endpoints referenced (visual.volcengineapi.com) are the official and legitimate domains for Volcengine services.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 20, 2026, 01:21 PM