Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add volcengine/ark-cli --skill arkcli-authgit clone --depth 1 https://github.com/volcengine/ark-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/volcengine/ark-cli/arkcli-auth)<a href="https://agentmods.dev/skills/volcengine/ark-cli/arkcli-auth"><img src="https://agentmods.dev/badge/skills/volcengine/ark-cli/arkcli-auth/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/volcengine/ark-cli/arkcli-auth"><img src="https://agentmods.dev/badge/skills/volcengine/ark-cli/arkcli-auth.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector pass
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00196 | $0.04538 |
| Opus 5.5 | $0.00078 | $0.01815 |
| Sonnet 5.5 | $0.00039 | $0.00908 |
| Haiku 4.5 | $0.00020 | $0.00454 |
Grade A, and why
arkcli-auth scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 125 lines — stays where its author put it; the contents beside it link to each section on GitHub.
arkcli auth
CRITICAL — 开始前 MUST 先用 Read 工具读取 ../arkcli-shared/SKILL.md,其中包含认证闸门、配置排查与共享安全规则
CRITICAL — 用户目标是其他业务命令时,必须先判断是不是被认证阻塞,再决定是否进入本 skill。
CRITICAL — auth 是身份/TTY 工作流,全域不注册 --dry-run;不要生成该 flag。
⚠️ 0.1.16 变化总览(必读):
- SSO 登录引入 Gate 1+2:浏览器流后比对 SSO trn 与
is_default profile.OwnerTrn,4-case 分别走BuildFirstProfile(新建) /GUIDE_SKIP(复用) / 提示切 default / 提示新建。详见docs/runtime/volc-sso.md。 - AK/SK 登录通道暂关:
auth login --access-key / --secret-key已注释,promptui 也移除"AK/SK"选项;SSO(火山)+arkcli auth login --no-browser(根命令 flag, 不是 volc-sso 子命令 flag)是唯一登录入口。 - auth status / auth whoami 输出新增 profile 切面字段:
active_profile.{name,type,region,project,owner_trn}和profiles_summary[...];顶层auth_method/logged_in/volc_sso/ark_api_key等老字段全部保留(向后兼容)。 - Profile 管理迁移到
arkcli profile:config init/list/show/switch/delete已 deprecated,详见../arkcli-config/SKILL.md。 - 0.1.17 首登动态选 project:
BuildFirstProfile的 project 步骤改为经 IAMListProjects拉当前身份名下真实 active project 列表交互选(拉取失败/无权限回退兜底default,不阻断登录)。登录后想换 project 不必重登:arkcli profile project [<name>](拉同一列表重选,把 platform profile 重派生到新 project,个人版 plan profile 保留),详见../arkcli-profile/SKILL.md。 - 1.0.4 起
arkcli auth login交互式浏览器 SSO 分支支持借用本机 volcengine-cli 登录态:检测到ve >= 1.0.45且已ve login时,直接接管 STS 落一份 arkcli identity (identity_store/<key>/metadata.json.source="ve", 不写 IDToken/refresh_token/ClientID; STS 由 volcengine-go-sdk 内部持 refresh_token 自动 refresh)。用户视角: 少一次浏览器授权; agent 视角:auth_method变成"sts"而非"sso", 但logged_in=true。检测失败 / ve 未登录 → 自动降级 arkcli 原生 SSO OAuth 流。详见references/arkcli-auth-login.md的"volcengine-cli 登录态借用"节。
适用场景
- 第一次登录
arkcli - 切换到 Volc SSO
- 登录后重新获取或切换 ARK API Key
- 查看当前凭证状态
- 回答"我是谁 / 我的 IAM ID 是多少 / 我属于哪个账号"——用
arkcli auth whoami - 清理本地登录状态
- 其他业务 skill 因未登录、凭证过期、身份不匹配而被阻塞
- 云开发机 / CI 已注入
VOLC_INIT_*凭证,无交互引导 —— 用arkcli init-volc(不是 SSO)
What ships with it
8 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/api-key-query.md 4.7 KB
- references/arkcli-auth-init-volc.md 3.3 KB
- references/arkcli-auth-login.md 11 KB
- references/arkcli-auth-status.md 2.2 KB
- references/arkcli-auth-whoami.md 5.2 KB
- references/auth-modes.md 11 KB
- references/identity-resolution.md 4.8 KB
- references/realname-gate.md 2.7 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 17d ago Changed · +3 lines 8448bbc0004e
- 1mo ago Changed · +6 lines c2f85a903799
- 1mo ago Changed 76c84b6c0b0d
- 1mo ago First seen · 116 lines · 196 tokens per session scan A 3c5c93f22f2a
arkcli-auth is a skill published in the GitHub repository volcengine/ark-cli (143 stars, last pushed 8d ago), licensed Apache-2.0. It adds 196 tokens to every session and 4,538 once invoked, about $0.0008 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
plugin-system
Generic plugin system for Python applications. Auto-discovery, validation, fault tolerance. Zero dependencies (Python stdlib only).
batch-file-ops
Batch-Dateioperationen (Löschen, Verschieben, Kopieren, Auflisten) mit Glob-Mustern. CLI-Werkzeug für effiziente Dateisystem-Operationen. Ohne Abhängigkeiten.
datamol
Pythonic wrapper around RDKit with simplified interface and sensible defaults. Preferred for standard drug discovery including SMILES parsing, standardization, descriptors, fingerprints, clustering, 3D conformers, parallel processing. Returns native rdkit.Chem.Mol objects. For advanced control or custom parameters…
clinicaltrials-database
Query ClinicalTrials.gov via API v2. Search trials by condition, drug, location, status, or phase. Retrieve trial details by NCT ID, export data, for clinical research and patient matching.
openalex-database
Query and analyze scholarly literature using the OpenAlex database. This skill should be used when searching for academic papers, analyzing research trends, finding works by authors or institutions, tracking citations, discovering open access publications, or conducting bibliometric analysis across 240M+ scholarly…
esm
Comprehensive toolkit for protein language models including ESM3 (generative multimodal protein design across sequence, structure, and function) and ESM C (efficient protein embeddings and representations). Use this skill when working with protein sequences, structures, or function prediction; designing novel…