byted-volcengine-topology-builder

byted-volcengine-topology-builder is a skill for Claude Code, Codex from bytedance/agentkit-samples. It costs 145 tokens per session (1,731 once invoked), scanned A, original, Apache-2.0.

A tool that collects Volcengine cloud assets and turns their connections into reusable data and diagrams. It can represent resources such as servers, networks, load balancers, and security groups in a shared topology map.

In plain words
What is it for?
It helps take an account snapshot, build a resource topology, and save machine-readable and human-readable views for later analysis.
Why use it?
It provides the structured resource map needed for dependency checks, impact analysis, troubleshooting, and asset reviews. Without it, later tools have no common record of how resources are related.

Skill for Claude CodeCodex ✓ vendor

Written for no agent in particular: nothing here depends on one.

Needs its repository: it runs a file that does not travel with it, so clone the repository first. The line is --output-file ./business_topologies/payment-core/account_assets_snapshot.json.

Good fit It helps take an account snapshot, build a resource topology, and save machine-readable and human-readable views for later analysis.

Compare 6 skills from other repositories ↓
About the project

bytedance/agentkit-samples is a collection of examples and tutorials for Volcengine AgentKit, an AI-agent development platform for building, deploying, and operating agent applications. Developers use the samples to learn agent creation, multi-agent collaboration, memory, retrieval, MCP integrations, media generation, customer service, and other workflows. The catalogue skills provide agent workflows based on these examples.

bytedance/agentkit-samples · 450 stars · on GitHub

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo
git clone --depth 1 https://github.com/bytedance/agentkit-samples
agentmods
npx agentmods add skills/bytedance/agentkit-samples/byted-volcengine-topology-builder

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for byted-volcengine-topology-builder

README.md
[![agentmods](https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-volcengine-topology-builder/github.svg)](https://agentmods.dev/skills/bytedance/agentkit-samples/byted-volcengine-topology-builder)
Your own site
<a href="https://agentmods.dev/skills/bytedance/agentkit-samples/byted-volcengine-topology-builder"><img src="https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-volcengine-topology-builder/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for byted-volcengine-topology-builder

Your own site · 80×15
<a href="https://agentmods.dev/skills/bytedance/agentkit-samples/byted-volcengine-topology-builder"><img src="https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-volcengine-topology-builder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 145 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 1,731 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe. Third-party audits
  • NVIDIA SkillSpector warn 7 Sept 2026
SkillSpector: 3 findings, up to high

These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →

  • high Privilege Escalation · line 53
    Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
    Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
  • high Privilege Escalation · line 83
    Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
    Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
  • high Privilege Escalation · line 97
    Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.
    Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
How audits are shown
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00145 $0.01731
Opus 5 $0.00072 $0.00865
Sonnet 5 $0.00029 $0.00346
Haiku 4.5 $0.00015 $0.00173

Measured 6d ago against content hash cac4cda593e8, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-09, from the pricing page.

Security

Grade A, and why

byted-volcengine-topology-builder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.

The scan reads SKILL.md. This mod also ships 8 executable files (scripts/build_topology_from_account_assets.py, scripts/dump_account_assets.py, scripts/render_topology_graph.py, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

skills/byted-volcengine-topology-builder/SKILL.md · 166 lines

How it starts

The opening of the file, as written. The whole thing — 166 lines — stays where its author put it; the contents beside it link to each section on GitHub.

火山引擎基础资产数据与拓扑 Skill

能力定位

这个 Skill 的职责是构建一层可复用的基础数据,而不是只服务某一个上层分析场景。

  • 采集层:尽量全量拉取当前已接入的火山引擎资源资产
  • 建模层:把原始快照整理成结构化资产数据和统一关系表达
  • 输出层:落盘为 json/md/dot/svg/png 等可复用产物
  • 复用层:供拓扑分析、影响面评估、自动化运维、故障排查、资产盘点、依赖梳理等场景继续消费

默认产物

默认会在当前工作空间的 business_topologies/<business_key>/ 下生成:

business_topologies/<business_key>/
  account_assets_snapshot.json
  topology.json
  topology.md
  topology.dot
  topology.svg   # 本地装有 Graphviz 或自动安装成功时生成
  topology.png   # 本地装有 Graphviz 或自动安装成功时生成

说明:

  • account_assets_snapshot.json 是原始资产快照,是后续所有分析和重建的基础输入
  • topology.json 是结构化关系模型,适合被脚本、agent、分析工具继续消费
  • topology.md 是给人快速浏览的文本视图
  • topology.dot 会始终生成,便于后续用 Graphviz 或其他工具继续转换
  • topology.svg/png 主要用于“看图/导图/给用户展示”

一键流水线

  1. 准备当前工作空间内的 .env
VOLCENGINE_AK=...
VOLCENGINE_SK=...
  1. 运行通用入口脚本:
python3 <byted-volcengine-topology-builder-skill>/scripts/run_topology_pipeline.py \
  --workspace-root "$(pwd)" \
  --env-path ./.env \
  --region cn-shanghai \
  --business default-topology

这条流水线默认会依次执行:

  • 采集资产快照
  • 从快照构建拓扑
  • 保存 topology.json/topology.md
  • 生成 topology.dot
  • 如果本地可用 Graphviz,再继续生成 topology.svg/topology.png

如果本地没有 dot 命令,脚本会先尝试自动安装 Graphviz;安装失败后再降级为仅输出 topology.dot,不会阻塞整个基础数据落盘流程。

常用参数

通用入口脚本 run_topology_pipeline.py 支持:

  • --business:业务或资产视图标识
  • --region:地域
  • --include:需要采集的资源类型,可重复传入或逗号分隔
  • --entry:构图时优先使用的入口资源类型,可重复传入或逗号分隔
  • --skip-render-graph:只生成结构化产物,不额外产图

例如:

python3 <byted-volcengine-topology-builder-skill>/scripts/run_topology_pipeline.py \
  --workspace-root "$(pwd)" \
  --env-path ./.env \
  --region cn-shanghai \
  --business payment-core \
  --include ecs,eip,clb,alb,natgateway,rds_mysql,redis \
  --entry eip --entry clb

分层执行

1. 采集资产快照

python3 <byted-volcengine-topology-builder-skill>/scripts/dump_account_assets.py \
  --region cn-shanghai \
  --env-path ./.env \
  --include ecs,eip,clb,alb,natgateway,rds_mysql,redis \
  --output-file ./business_topologies/payment-core/account_assets_snapshot.json

Read the full file on GitHub · 166 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 6d ago First seen · 166 lines · 145 tokens per session scan A cac4cda593e8

Subscribe to this mod's changes

byted-volcengine-topology-builder is a skill published in the GitHub repository bytedance/agentkit-samples (450 stars, last pushed 5d ago), licensed Apache-2.0. It adds 145 tokens to every session and 1,731 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.