bytedance/agentkit-samples is a collection of examples and tutorials for Volcengine AgentKit, an AI-agent development platform for building, deploying, and operating agent applications. Developers use the samples to learn agent creation, multi-agent collaboration, memory, retrieval, MCP integrations, media generation, customer service, and other workflows. The catalogue skills provide agent workflows based on these examples.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bytedance/agentkit-samples --skill byted-antiddospro-hostopsgit clone --depth 1 https://github.com/bytedance/agentkit-samplesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bytedance/agentkit-samples/byted-antiddospro-hostops)<a href="https://agentmods.dev/skills/bytedance/agentkit-samples/byted-antiddospro-hostops"><img src="https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-antiddospro-hostops.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00060 | $0.01684 |
| Opus 5 | $0.00030 | $0.00842 |
| Sonnet 5 | $0.00012 | $0.00337 |
| Haiku 4.5 | $0.00006 | $0.00168 |
Grade A, and why
byted-antiddospro-hostops scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 147 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AntiDDoSPro HostOps
本 skill 用于对火山引擎 AntiDDoSPro 防护域名做只读巡检、分析和排障。
最适合的场景：
- 域名健康巡检
- 最近攻击排查
- 防护策略检查
- 智能防护 / AI 防护状态核对
- CCAI 资产、事件、建议的只读查询
- 流量与响应异常分析
- 域名到高防实例 IP 的解析
当任务明确围绕某个 AntiDDoSPro 防护域名或 Host 展开，并且目标是查看、分析、解释现状，而不是修改配置时，应优先使用本 skill，而不是通用排障或通用报表 skill。
Compatibility
期望环境：
- Python 3
requests- 通过环境变量
VOLC_ACCESS_KEY/VOLC_SECRET_KEY提供火山引擎凭证
需要实际发起 API 调用时，使用本 skill 附带的客户端能力。
不要在对话、提示词或工具参数中传入 AK/SK。
Boundaries
本 skill 只读。
不要：
- 修改防护策略
- 增删黑白名单规则
- 修改区域封禁配置
- 调用任何写接口
如果用户要求变更配置，应明确说明本 skill 只支持查看、分析和排障，不负责下发变更。
Required inputs
尽量收集：
host：防护域名或 Hostbegin_time/end_time：如果用户明确给出了时间范围
如果用户没有给时间范围：
- 对攻击和流量类分析，默认查看最近 1 小时
如果用户没有给 host：
- 先追问防护域名或 Host，再继续
Default workflow
1. 先判断用户目标
判断用户是想要：
- 一次完整巡检
- 查看防护策略
- 核对智能防护 / AI 防护状态
- 排查攻击事件
- 查看 CCAI 资产、事件或处置建议
- 分析流量或报表异常
- 解析域名对应的高防实例 IP
如果用户表达比较模糊，默认先做完整巡检。
2. 选择合适入口
- 防护策略检查 →
query_antiddospro_policy_overview - 智能防护 / AI 防护状态核对 →
query_antiddospro_policy_overview，必要时结合 CCAI 资产查询 - 攻击事件排查 →
query_antiddospro_attack_events；如果用户明确在看 CCAI 事件，则优先走 CCAI 事件查询 - CCAI 资产、事件、建议查询 →
query_antiddospro_ccai_overview；需要进一步展开时，再分别调用ListAssets、ListEvents、DescribeEvent、ListRecommendations、DescribeRecommendation - 流量或报表分析 →
query_antiddospro_flow_traffic - 域名到实例 IP 解析 →
resolve_antiddospro_instance_ips - 需求宽泛或表述不清 →
query_antiddospro_host_healthcheck，并按需补充 CCAI 只读信息
3. 解读结果时保持保守
- 明确区分"未观测到数据"和"确认没有风险"
- 上游接口报错时，直接说明真实原因
- 需要排障时，保留请求 ID
- 如果域名无法解析出实例 IP，要明确说明四层 DDoS 视图可能不完整
- 智能防护开关只以
DescSmartCCConf的响应为准；GetHostDefStatus中的SmartEnable不是智能防护开关语义，不能据此下结论 DescSmartCCConf的查询参数是Domain，不是HostDescribeAttackEvent使用2023-03-08，请求体传InstanceIps[]DescribeBizFlowAndConnCount使用2023-03-08，请求体传InstanceIps[]- DDoS 攻击源相关接口按单个
InstanceIp查询，不要把InstanceIps数组直接传给DescribeTopAttackSrcIp、DescribeTopAttackSrcArea、DescribeTopAttackSrcInfo、DescribeAttackDistribution - 不要凭经验猜测参数位置；优先按接口当前可用的请求形态调用
4. 向用户汇总结论
先给结论，再给观测范围、关键发现、风险点和下一步建议。
What ships with it
6 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 147 lines · 60 tokens per session scan A 6a05cae8ed5d
byted-antiddospro-hostops is a skill published in the GitHub repository bytedance/agentkit-samples (450 stars, last pushed 4d ago), licensed Apache-2.0. It adds 60 tokens to every session and 1,684 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
aatmf-t10-confidentiality-breach
AATMF T10 — Integrity & Confidentiality Breach. System prompt extraction, training-data extraction, model-weight leakage, private-key recovery.
ensembl-database
Query Ensembl genome database REST API for 250+ species. Gene lookups, sequence retrieval, variant analysis, comparative genomics, orthologs, VEP predictions, for genomic research.
mochi-remind
Handle due reminders — notify the user with natural language and mark them done.
sidewinder-rattlesnake
Adversary-emulation profile for SideWinder (G0121 / Rattlesnake / T-APT-04 / Razor Tiger), India's suspected state-sponsored cyber-espionage actor.
ha-data-stores
Map of Hope Agent's local data stores and safe read-only query workflow. Use when the user asks where Hope Agent stores data, wants to inspect sessions/messages/memory/logs/background jobs/knowledge indexes/settings, asks the model to query local app data, or debugging requires checking persisted state. Trigger…
sn-image-imitate
An image tool that creates new content while following the visual style and layout of a single reference image.