bytedance/agentkit-samples is a collection of examples and tutorials for Volcengine AgentKit, an AI-agent development platform for building, deploying, and operating agent applications. Developers use the samples to learn agent creation, multi-agent collaboration, memory, retrieval, MCP integrations, media generation, customer service, and other workflows. The catalogue skills provide agent workflows based on these examples.
Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/bytedance/agentkit-samplesnpx agentmods add skills/bytedance/agentkit-samples/byted-volcengine-topology-builderWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bytedance/agentkit-samples/byted-volcengine-topology-builder)<a href="https://agentmods.dev/skills/bytedance/agentkit-samples/byted-volcengine-topology-builder"><img src="https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-volcengine-topology-builder/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bytedance/agentkit-samples/byted-volcengine-topology-builder"><img src="https://agentmods.dev/badge/skills/bytedance/agentkit-samples/byted-volcengine-topology-builder.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Privilege Escalation · line 53 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 83 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- high Privilege Escalation · line 97 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00145 | $0.01731 |
| Opus 5 | $0.00072 | $0.00865 |
| Sonnet 5 | $0.00029 | $0.00346 |
| Haiku 4.5 | $0.00015 | $0.00173 |
Grade A, and why
byted-volcengine-topology-builder scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 166 lines — stays where its author put it; the contents beside it link to each section on GitHub.
火山引擎基础资产数据与拓扑 Skill
能力定位
这个 Skill 的职责是构建一层可复用的基础数据,而不是只服务某一个上层分析场景。
- 采集层:尽量全量拉取当前已接入的火山引擎资源资产
- 建模层:把原始快照整理成结构化资产数据和统一关系表达
- 输出层:落盘为
json/md/dot/svg/png等可复用产物 - 复用层:供拓扑分析、影响面评估、自动化运维、故障排查、资产盘点、依赖梳理等场景继续消费
默认产物
默认会在当前工作空间的 business_topologies/<business_key>/ 下生成:
business_topologies/<business_key>/
account_assets_snapshot.json
topology.json
topology.md
topology.dot
topology.svg # 本地装有 Graphviz 或自动安装成功时生成
topology.png # 本地装有 Graphviz 或自动安装成功时生成
说明:
account_assets_snapshot.json是原始资产快照,是后续所有分析和重建的基础输入topology.json是结构化关系模型,适合被脚本、agent、分析工具继续消费topology.md是给人快速浏览的文本视图topology.dot会始终生成,便于后续用 Graphviz 或其他工具继续转换topology.svg/png主要用于“看图/导图/给用户展示”
一键流水线
- 准备当前工作空间内的
.env:
VOLCENGINE_AK=...
VOLCENGINE_SK=...
- 运行通用入口脚本:
python3 <byted-volcengine-topology-builder-skill>/scripts/run_topology_pipeline.py \
--workspace-root "$(pwd)" \
--env-path ./.env \
--region cn-shanghai \
--business default-topology
这条流水线默认会依次执行:
- 采集资产快照
- 从快照构建拓扑
- 保存
topology.json/topology.md - 生成
topology.dot - 如果本地可用
Graphviz,再继续生成topology.svg/topology.png
如果本地没有 dot 命令,脚本会先尝试自动安装 Graphviz;安装失败后再降级为仅输出 topology.dot,不会阻塞整个基础数据落盘流程。
常用参数
通用入口脚本 run_topology_pipeline.py 支持:
--business:业务或资产视图标识--region:地域--include:需要采集的资源类型,可重复传入或逗号分隔--entry:构图时优先使用的入口资源类型,可重复传入或逗号分隔--skip-render-graph:只生成结构化产物,不额外产图
例如:
python3 <byted-volcengine-topology-builder-skill>/scripts/run_topology_pipeline.py \
--workspace-root "$(pwd)" \
--env-path ./.env \
--region cn-shanghai \
--business payment-core \
--include ecs,eip,clb,alb,natgateway,rds_mysql,redis \
--entry eip --entry clb
分层执行
1. 采集资产快照
python3 <byted-volcengine-topology-builder-skill>/scripts/dump_account_assets.py \
--region cn-shanghai \
--env-path ./.env \
--include ecs,eip,clb,alb,natgateway,rds_mysql,redis \
--output-file ./business_topologies/payment-core/account_assets_snapshot.json
What ships with it
9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/public_ip_115_190_115_84_metadata.json 164 B
- scripts/build_topology_from_account_assets.py 49 KB runs code
- scripts/dump_account_assets.py 21 KB runs code
- scripts/render_topology_graph.py 35 KB runs code
- scripts/run_topology_pipeline.py 5.4 KB runs code
- scripts/save_topology.py 11 KB runs code
- scripts/sdk_runtime.py 7.7 KB runs code
- scripts/topology_constants.py 579 B runs code
- tests/test_topology_builder.py 10 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 166 lines · 145 tokens per session scan A cac4cda593e8
byted-volcengine-topology-builder is a skill published in the GitHub repository bytedance/agentkit-samples (450 stars, last pushed 5d ago), licensed Apache-2.0. It adds 145 tokens to every session and 1,731 once invoked, about $0.0007 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
ensembl-database
Query Ensembl genome database REST API for 250+ species. Gene lookups, sequence retrieval, variant analysis, comparative genomics, orthologs, VEP predictions, for genomic research.
aatmf-t10-confidentiality-breach
AATMF T10 — Integrity & Confidentiality Breach. System prompt extraction, training-data extraction, model-weight leakage, private-key recovery.
mochi-remind
Handle due reminders — notify the user with natural language and mark them done.
sidewinder-rattlesnake
Adversary-emulation profile for SideWinder (G0121 / Rattlesnake / T-APT-04 / Razor Tiger), India's suspected state-sponsored cyber-espionage actor.
ha-data-stores
Map of Hope Agent's local data stores and safe read-only query workflow. Use when the user asks where Hope Agent stores data, wants to inspect sessions/messages/memory/logs/background jobs/knowledge indexes/settings, asks the model to query local app data, or debugging requires checking persisted state. Trigger…
sn-image-imitate
An image tool that creates new content while following the visual style and layout of a single reference image.