bytedance/agentkit-samples is a collection of examples and tutorials for Volcengine AgentKit, an AI-agent development platform for building, deploying, and operating agent applications. Developers use the samples to learn agent creation, multi-agent collaboration, memory, retrieval, MCP integrations, media generation, customer service, and other workflows. The catalogue skills provide agent workflows based on these examples.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add bytedance/agentkit-samples --skill byted-livesaas-mastergit clone --depth 1 https://github.com/bytedance/agentkit-samplesWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bytedance/agentkit-samples/byted-livesaas-master)<a href="https://agentmods.dev/skills/bytedance/agentkit-samples/byted-livesaas-master"><img src="https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-livesaas-master/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bytedance/agentkit-samples/byted-livesaas-master"><img src="https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-livesaas-master.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 108 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 131 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 159 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00160 | $0.06894 |
| Opus 5 | $0.00080 | $0.03447 |
| Sonnet 5 | $0.00032 | $0.01379 |
| Haiku 4.5 | $0.00016 | $0.00689 |
Grade A, and why
byted-livesaas-master scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
> **唯一执行入口**:所有命令必须通过 `bytedlive` CLI,禁止手写 curl 或未文档化的 HTTP 请求。 How it starts
The opening of the file, as written. The whole thing — 420 lines — stays where its author put it; the contents beside it link to each section on GitHub.
byted-livesaas-master(企业直播控播)
0. 启动埋点
每次启用本 Skill 时,先 best-effort 执行一次埋点脚本,再继续处理用户请求;脚本失败、超时或接口不可达时不得中断任务。
node tools/report_usage.js
脚本根据 Skill 安装路径自动识别 Agent(如 ~/.cursor/skills/ → cursor,~/.codex/skills/ → codex)。禁止在未识别当前环境时硬编码 --agent codex。仅在自定义安装目录(skills add --target)或自动识别失败时,显式传入 --agent cursor|codex|claude-code|trae|openclaw;仍无法识别时使用 unknown。该脚本由 Node/CLI 发起 POST 上报,不支持浏览器页面跨域调用。
1. 适用范围
When to use
当用户意图涉及以下任一场景时触发本 Skill:
- 直播间生命周期管理与管控:创建/删除直播间,查询列表,修改基础配置(名称/时间/模式),控制状态(开播/锁定/恢复/下播/封禁)
- 直播数据分析与观众画像:查询直播间观看时长分布统计、拉取观众用户画像明细用于洞察
- 商品库与卡片运营:直播中对商品卡片进行上架、讲解态切换,查询商品状态或统计数据
- 评论治理与内容分析:发送/查询/轮询评论,删除用户消息,配置敏感词,或获取评论的分析结果(含大模型分析)
- 账号基础信息与媒资库运维:获取账号配置/全局权益额度信息,批量删除媒资库视频,检查文档库容量
- 营销互动与连麦控制:创建直播间卡券等互动工具,管理网页直播连麦协同状态
- 系统消息:向直播间推送系统定制消息
- 观众管控:针对观众的禁言、拉黑、踢出
- 观看页外观:切换主题(暗黑/清爽/经典/传统节庆)
- OpenAPI 兜底:上述未明确覆盖到的其余企业直播能力操控需求,通过调用企业直播OpenAPI来实现
When NOT to use
- 推流/拉流/编码等底层媒体问题 → 不属于本 Skill
- WebSDK 接入 / 小程序进房 / 观看端 Token → 使用 byted-livesaas-dev Skill
- 账号计费 / 套餐管理 → 引导用户至火山引擎控制台
- 非企业直播产品(如视频点播、RTC)→ 不属于本 Skill
2. 架构概览
用户意图 → Skill(路由 + 约束) → Agent 生成 CLI 命令 → bytedlive CLI 执行
- Skill 层:定义意图到 CLI 子命令的映射 + 执行约束(不含可执行脚本)
- Agent 层:根据路由表与约束拼装
bytedlive命令并执行 - CLI 层:封装凭证管理、签名、请求发送、确认交互与 JSON 结果
唯一执行入口:所有命令必须通过
bytedliveCLI,禁止手写 curl 或未文档化的 HTTP 请求。
3. 首次使用引导与依赖安装(Onboarding)
触发条件:本 Skill 被首次激活时(即用户第一次发出匹配 §1 触发词的请求),Agent 必须先执行 onboarding 流程(含 CLI 自动安装与凭证配置),再处理用户的实际请求。
3.1 Onboarding 检查与安装流程
Step 0: 环境检查与 CLI 自动安装
├─ 检查依赖:执行 `bytedlive --version` 判断是否已安装
├─ 未安装时先引导安装:`npm i -g bytedlive-cli`
├─ Agent 有权限时可静默执行安装
├─ 成功:执行 `bytedlive --version` 验证后进入 Step 1
└─ 失败:输出【CLI 安装失败引导】(见 3.2),中止后续流程,等待用户手动处理
Step 1: 检查凭证 → bytedlive openapi check-credentials --pretty
├─ 成功(已配置) → 跳过引导,直接处理用户请求
└─ 失败(未配置 / 凭证无效) → 进入 Step 2
Step 2: 输出【AK/SK 本地配置引导消息】(见 3.3)
Step 3: 用户在本地终端执行 set-credentials,CLI 写入凭证并验证
Step 4: 验证通过 → 继续处理用户的原始请求
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 420 lines · 160 tokens per session scan A ee7cf3491f75
byted-livesaas-master is a skill published in the GitHub repository bytedance/agentkit-samples (450 stars, last pushed 4d ago), licensed Apache-2.0. It adds 160 tokens to every session and 6,894 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
ecom-details-image
A planning tool for e-commerce product visuals, including main-image concepts, scene ideas, detail-page directions, and prompts for image-generation systems.
food-beverage-content-production
Provider-independent production guidance for AI agents creating or retouching appetizing food and beverage images, recipe videos, restaurant/menu visuals, CPG ads, ecommerce product images, beverage pours, packaging/lifestyle shots, and social food clips, including truthfulness, labeling/claims discipline, styling…
ecommerce-product-imagery
Provider-independent ecommerce product imagery production for marketplace listings, product pages, hero shots, lifestyle scenes, comparison charts, infographics, variant/packaging images, virtual try-on or placement mockups, ads, and AI-assisted product visuals. Use when an agent must plan, generate, edit, review…
p-image-try-on
Use when someone wants virtual try-on — dress a person in clothes from reference photos for fashion or ecommerce.
gemini-image-generator
Use when generating professional posed product images for e-commerce using Gemini AI with optimized prompts.
podcast-generation
Use this skill when the user requests to generate, create, or produce podcasts from text content. Converts written content into a two-host conversational podcast audio format with natural dialogue.