Byted Byteplus Vod Precision Erasure

• Analyzed: May 14, 2026, 4:16 AM
• Findings: 1
• Version: 1.0.0
• Hash: e5ccc9eeaa3bc9f6500b4c819e98111ba4ae2716de0f09b4957daad19db04462
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides legitimate functionality for uploading media and performing OCR-based text erasure on the BytePlus VOD platform. It includes a security-conscious path validation mechanism in `upload.py` that restricts file uploads to specific allowed directories (e.g., workspace, /tmp), effectively mitigating arbitrary file exfiltration risks. The implementation uses standard HMAC-SHA256 signing for API requests in `vod_client.py` and follows official BytePlus VOD integration patterns without any evidence of malicious intent, obfuscation, or unauthorized data access.