Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/volcengine/ark-cli/arkcli-authnpx skills add volcengine/ark-cli --skill arkcli-authgit clone --depth 1 https://github.com/volcengine/ark-cliWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00196 | $0.03903 |
| Opus 5 | $0.00098 | $0.01951 |
| Sonnet 5 | $0.00039 | $0.00781 |
| Haiku 4.5 | $0.00020 | $0.00390 |
Grade A, and why
arkcli-auth scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 116 lines — stays where its author put it; the contents beside it link to each section on GitHub.
arkcli auth
CRITICAL — 开始前 MUST 先用 Read 工具读取 ../arkcli-shared/SKILL.md，其中包含认证闸门、配置排查与共享安全规则
CRITICAL — 用户目标是其他业务命令时，必须先判断是不是被认证阻塞，再决定是否进入本 skill。
CRITICAL — auth 是身份/TTY 工作流，全域不注册 --dry-run；不要生成该 flag。
⚠️ 0.1.16 变化总览（必读）：
- SSO 登录引入 Gate 1+2：浏览器流后比对 SSO trn 与
is_default profile.OwnerTrn，4-case 分别走BuildFirstProfile(新建) /GUIDE_SKIP(复用) / 提示切 default / 提示新建。详见docs/volc-sso.md。 - AK/SK 登录通道暂关：
auth login --access-key / --secret-key已注释,promptui 也移除"AK/SK"选项；SSO（火山）+arkcli auth login --no-browser（根命令 flag, 不是 volc-sso 子命令 flag）是唯一登录入口。 - auth status / auth whoami 输出新增 profile 切面字段：
active_profile.{name,type,region,project,owner_trn}和profiles_summary[...]；顶层auth_method/logged_in/volc_sso/ark_api_key等老字段全部保留（向后兼容）。 - Profile 管理迁移到
arkcli profile：config init/list/show/switch/delete已 deprecated，详见../arkcli-config/SKILL.md。 - 0.1.17 首登动态选 project：
BuildFirstProfile的 project 步骤改为经 IAMListProjects拉当前身份名下真实 active project 列表交互选（拉取失败/无权限回退兜底default，不阻断登录）。登录后想换 project 不必重登：arkcli profile project [<name>]（拉同一列表重选，把 platform profile 重派生到新 project，个人版 plan profile 保留），详见../arkcli-profile/SKILL.md。 - 1.0.4 起
arkcli auth login交互式浏览器 SSO 分支支持借用本机 volcengine-cli 登录态：检测到ve >= 1.0.45且已ve login时,直接接管 STS 落一份 arkcli identity (identity_store/<key>/metadata.json.source="ve", 不写 IDToken/refresh_token/ClientID; STS 由 volcengine-go-sdk 内部持 refresh_token 自动 refresh)。用户视角: 少一次浏览器授权; agent 视角:auth_method变成"sts"而非"sso", 但logged_in=true。检测失败 / ve 未登录 → 自动降级 arkcli 原生 SSO OAuth 流。详见references/arkcli-auth-login.md的"volcengine-cli 登录态借用"节。
适用场景
- 第一次登录
arkcli - 切换到 Volc SSO
- 登录后重新获取或切换 ARK API Key
- 查看当前凭证状态
- 回答"我是谁 / 我的 IAM ID 是多少 / 我属于哪个账号"——用
arkcli auth whoami - 清理本地登录状态
- 其他业务 skill 因未登录、凭证过期、身份不匹配而被阻塞
- 云开发机 / CI 已注入
VOLC_INIT_*凭证，无交互引导 —— 用arkcli init-volc（不是 SSO）
What ships with it
7 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 116 lines · 196 tokens per session scan A 3c5c93f22f2a
arkcli-auth is a skill published in the GitHub repository volcengine/ark-cli (112 stars, last pushed 5d ago), licensed Apache-2.0. It adds 196 tokens to every session and 3,903 once invoked, about $0.0010 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
happiness-skill
当用户问「怎么才能更幸福/为什么得到了还不满足/怎么减少焦虑」时调用。 核心理念: 幸福是缺憾感清空的默认状态, 是可训练的技能; 欲望是与自己的契约(得到前不快乐), 同时只留一个重大欲望; 活在当下。 不适用于: 临床抑郁等需要专业治疗的场景(本书方法不能替代医疗)。 Triggers: 幸福/不快乐/欲望/焦虑/知足/活在当下/happiness/desire/anxiety.
create-business
Guided journey from raw idea to a validated, positioned, priced business with a chosen beachhead. Orchestrates ten skills phase by phase - jobs-to-be-done, mom-test, design-sprint, lean-startup, good-strategy-bad-strategy, blue-ocean-strategy, obviously-awesome, hundred-million-offers, monetizing-innovation…
jobs-to-be-done
Discover what customers truly need by analyzing the "job" they hire your product to do. Use when the user mentions "customer discovery", "why customers churn", "what job does this solve", "competing against luck", "product-market fit", "switching behavior", "milkshake moment", or "functional vs emotional jobs". Also…
asc-subscription-localization
Bulk-localize subscription, subscription-group, and in-app purchase display names across App Store locales using asc, including API 4.4.1 version-scoped v2 resources. Use when filling or updating subscription/IAP names and descriptions without App Store Connect UI work.
pcbway
PCBWay PCB fabrication and assembly — turnkey/consigned assembly, design rules, ordering workflow. Alternative to JLCPCB for manufacturing. Use with KiCad. Use this skill when the user mentions PCBWay, needs turnkey assembly (PCBWay sources parts by MPN), has parts not available on LCSC, needs assembled boards with…
scienceworld-growth-focuser
Use when you have planted a seed or need to track a plant's growth stage (sprouting, flowering, reproduction). Applies the 'focus on' action to a specific plant or biological entity to signal intent and monitor its development. Trigger after planting or when you need to observe life cycle progression in the…