bytedance/agentkit-samples is a collection of examples and tutorials for Volcengine AgentKit, an AI-agent development platform for building, deploying, and operating agent applications. Developers use the samples to learn agent creation, multi-agent collaboration, memory, retrieval, MCP integrations, media generation, customer service, and other workflows. The catalogue skills provide agent workflows based on these examples.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bytedance/agentkit-samples --skill byted-bytehouse-data-asset-analyzergit clone --depth 1 https://github.com/bytedance/agentkit-samplesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bytedance/agentkit-samples/byted-bytehouse-data-asset-analyzer)<a href="https://agentmods.dev/skills/bytedance/agentkit-samples/byted-bytehouse-data-asset-analyzer"><img src="https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-bytehouse-data-asset-analyzer/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bytedance/agentkit-samples/byted-bytehouse-data-asset-analyzer"><img src="https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-bytehouse-data-asset-analyzer.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 4 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Privilege Escalation · line 28 Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified.Fix: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, document the justification and scope.
- medium Rogue Agent · line 80 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 80 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Tool Misuse · line 262 Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface.Fix: Override unsafe defaults with secure settings (verify=True, auth required, restrictive permissions). Review and harden all tool configurations.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00131 | $0.02588 |
| Opus 5 | $0.00066 | $0.01294 |
| Sonnet 5 | $0.00026 | $0.00518 |
| Haiku 4.5 | $0.00013 | $0.00259 |
Grade B, and why
byted-bytehouse-data-asset-analyzer scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootmediumPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- `jq`（`export_config.sh` 依赖，解析 JSON 配置。安装方式：`brew install jq` 或 `sudo apt install jq`） How it starts
The opening of the file, as written. The whole thing — 264 lines — stays where its author put it; the contents beside it link to each section on GitHub.
ByteHouse 数据资产和血缘分析 Skill
描述
直接通过 clickhouse-connect 连接 ByteHouse（HTTPS 8123），查询 system.tables / system.columns 扫描目标数据库的所有表与字段，生成三份产物：
- Schema 报告 — 数据库完整表结构（引擎、字段、DDL 原文等）。
- 数据资产目录 — 表总数、列总数、引擎分布、自动标签。
- 血缘分析报告 — Distributed ↔ Local 关系、跨表同名列的相似性。
当以下情况时使用此 Skill：
- 需要获取 ByteHouse 数据库的表结构和字段信息。
- 需要生成数据资产目录、盘点数据资产。
- 需要分析表之间的血缘关系（例如 Distributed → Local）。
- 用户提到 "数据资产"、"血缘分析"、"表结构"、"字段分析" 等关键词。
前置条件
- Python 3.8+
clickhouse-connect（安装方式：pip install clickhouse-connect）jq（export_config.sh依赖，解析 JSON 配置。安装方式：brew install jq或sudo apt install jq）- 有效的 ByteHouse 连接信息（保存于
~/.bytehouse_config.json）
📁 文件说明
- SKILL.md — 本文件，技能主文档。
- scripts/data_asset_analyzer.py — 数据资产和血缘分析主程序。
- scripts/export_config.sh — 从
~/.bytehouse_config.json加载配置到环境变量（依赖jq）。
配置说明
配置保存在 ~/.bytehouse_config.json。如果文件存在且非空，直接使用；若不存在，向用户索要连接信息（可以把 ByteHouse 连接信息获取指引 发给用户），拿到后写入 JSON 文件，避免重复询问。
{
"BYTEHOUSE_HOST": "<ByteHouse-host>",
"BYTEHOUSE_PORT": "8123",
"BYTEHOUSE_USER": "bytehouse",
"BYTEHOUSE_PASSWORD": "<ByteHouse-password>"
}
配置项说明：
| 配置项 | 是否必填 | 默认值 | 说明 |
|---|---|---|---|
BYTEHOUSE_HOST |
是 | — | ByteHouse 网关域名 |
BYTEHOUSE_PORT |
否 | 8123 |
HTTP(S) 端口 |
BYTEHOUSE_USER |
否 | bytehouse |
用户名 |
BYTEHOUSE_PASSWORD |
是 | — | 密码 / API Key |
加载配置：
source scripts/export_config.sh
🧭 智能体使用指引
- 确认配置：
source scripts/export_config.sh，确认BYTEHOUSE_HOST等环境变量已就绪。 - 确认要分析的数据库：若用户未指定，主动询问（例如
default、tpcds）。 - 执行分析：
python3 scripts/data_asset_analyzer.py <database>，脚本会通过clickhouse-connect查询system.tables/system.columns拉取元数据。 - 展示结果：根据
scripts/output/目录里的 3 份 JSON 结果，给出总表数、总列数、引擎分布、Top 血缘关系等要点。 - 禁止臆造：所有资产/血缘信息一律来自脚本产物，不要凭上下文猜测。
🎯 功能特性
1. 完整 Schema 获取
- 获取指定数据库的所有表。
- 获取每张表的所有字段。
- 提取表引擎、注释等元数据。
- 保留 CREATE TABLE 语句原文。
2. 数据资产目录生成
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 264 lines · 131 tokens per session scan B 274088358959
byted-bytehouse-data-asset-analyzer is a skill published in the GitHub repository bytedance/agentkit-samples (450 stars, last pushed 5d ago), licensed Apache-2.0. It adds 131 tokens to every session and 2,588 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it B with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
bigquery-graph
Skill for Graph Query Language (GQL) or SQL/PGQ queries against a property graph. Includes path finding, multi-hop traversal, topological connection, shortest path, node reachability, edge connectivity, and semantic graph queries.
review-prs
Review a GitHub pull request in the googleapis/mcp-toolbox repo against the team's reviewer checklist: PR title/description conventions, linked issue, logic errors and unhandled edge cases, breaking changes, test coverage, docs updates, security (input handling), and new dependencies. Use whenever a maintainer asks…
stale-sweep
Sweep the googleapis/mcp-toolbox repo for issues and PRs with no real activity in N days (default 60), sort each by whose silence it is (the author's, ours, or nobody's), and draft the nudge or close comment. Use whenever a maintainer asks for a stale sweep, backlog cleanup, or an SLO check, e.g. "stale sweep", "find…
triage-issues
Triage GitHub issues in the googleapis/mcp-toolbox repo: propose the correct labels (type / priority / product / status), check for duplicates, verify a bug has enough info to act on, and draft a triage comment. Use whenever a maintainer asks you to triage, label, categorize, prioritize, or "look at" an issue (or a…
benchling-integration
Benchling R&D platform integration. Access registry (DNA, proteins), inventory, ELN entries, workflows via API, build Benchling Apps, query Data Warehouse, for lab data management automation.
bloodhound-query
BloodHound ingestion + canonical Cypher queries for AD attack-path enumeration. Run after collector dumps zip; promotes findings into the knowledge graph.