Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add volcengine/ark-cli --skill arkcli-helpergit clone --depth 1 https://github.com/volcengine/ark-cliWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/volcengine/ark-cli/arkcli-helper)<a href="https://agentmods.dev/skills/volcengine/ark-cli/arkcli-helper"><img src="https://agentmods.dev/badge/skills/volcengine/ark-cli/arkcli-helper/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/volcengine/ark-cli/arkcli-helper"><img src="https://agentmods.dev/badge/skills/volcengine/ark-cli/arkcli-helper.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Agent Snooping · line 184 Skill reads from agent configuration directories (.claude/, .codex/, .gemini/). These directories may contain API keys, personal settings, and other credentials that the skill has no legitimate need to access.Fix: Remove all code or instructions that access agent configuration directories (.claude/, .codex/, .gemini/). If configuration values are needed, pass them explicitly as parameters or environment variabl
- high Privilege Escalation · line 187 Code accesses credential files (SSH keys, AWS credentials, etc.). This could indicate credential theft attempts.Fix: Remove references to credential paths. Use environment variables or secrets managers. For docs, use placeholder paths (e.g., /path/to/config). Never load .env or token files in production code paths.
- medium MCP Rug Pull · line 174 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00348 | $0.09271 |
| Opus 5.5 | $0.00139 | $0.03708 |
| Sonnet 5.5 | $0.00070 | $0.01854 |
| Haiku 4.5 | $0.00035 | $0.00927 |
Grade B, and why
arkcli-helper scanned grade B with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 17d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reads agent configuration directoriesmediumAgent snooping
.claude/, .codex/, .gemini/ hold keys, settings and other credentials a mod has no legitimate need for.
- `codex` 支持 model/provider + MCP。默认 **profile 模式**写 `~/.codex/arkcli.config.toml`,需用 `codex --profile arkcli` 启动 terminal/TUI 才生效;传 `--codex-config-scope global` 才写 `~/.codex/config.toml`,该范围可能被 Codex CLI/TUI、Codex App、 How it starts
The opening of the file, as written. The whole thing — 234 lines — stays where its author put it; the contents beside it link to each section on GitHub.
arkcli helper —— 给本机 AI Agent 配置 Plan / Platform Endpoint / 注入 MCP
前置: 先用 Read 读 ../arkcli-shared/SKILL.md 获取共享安全规则与认证闸门。
CRITICAL — arkcli helper 整个命令域不支持 --dry-run。 Helper
面向 TTY/本地 harness 配置，不是 API request preview。任何 helper
命令带 --dry-run 都应 fail-fast 为 unknown flag；Agent 不得生成该
组合，也不得把它当作写操作保护。真实 configure/reset/mcp/supabase
仍必须先展示目标与路径并取得明确确认。
命令选择（先选最具体的子命令）
- 普通 Helper 准入从
arkcli helper list和用户指定的目标开始；不要为补齐上下文自动执行profile show/list/keys list。这些 Profile 命令可能在线同步并回写 Key，只有用户显式要求 Profile 管理时才进入，并先说明影响。 - 用户要查看或配置 Agent 的 model/provider、Plan、Platform Endpoint，或核对
--with-mcp/--with-supabase/--with-routing等非交互选项时，必须选择arkcli helper configure；只查看用法也要运行arkcli helper configure --help，不能退化成父级arkcli helper --help。 - 用户只要 Harness 工具、不改 model/provider 时，选择
arkcli helper mcp [target]。不传--capability配整组 Agent Plan MCP；只要专业数据集、豆包搜索或 Agent 记忆时分别传--capability datapro|web-search|agent-memory；只要云电脑时传--capability cua。选择豆包搜索后默认关闭目标客户端的原生WebSearch/web_search，用户要求保留时加--keep-native-websearch。发生关闭时立即输出作用域、配置文件和完整 reset 命令。只查看用法时运行arkcli helper mcp --help。 - Helper 配置 Agent Plan 时只能使用该 profile 的专属/席位 Key，不能用普通 API Key 池兜底。个人版专属记录存在但非 Active（如
Restricted）时，真人 TTY 会先说明轮转将立即使旧 Key 失效并询问；确认后只轮转一次、最多读 3 次状态，第一轮 Active 即停止。无专属记录、用户拒绝或非 TTY 时不轮转；失败引导必须去 Agent Plan 使用配置页，不能去普通 API Key 页面或auth apikey。 arkcli-auth只处理实际认证阻塞。用户仅要求查看 helper 的--help时，不要转去登录、init-volc或其他认证命令。
适用场景 / 唤起信号
- 用户要给本机 Claude Code / Codex / OpenCode / OpenClaw / Hermes / ZCode 配置 Plan 或 Platform Endpoint 的 model/provider。
- 用户要给支持的目标 Agent 配置豆包搜索、专业数据集或 OpenViking MCP，只安装云电脑 CUA Skill，或配置 byted-supabase。
- 用户询问
arkcli helper的安装态、配置态、文件落点、重载方式或 Agent Plan Harness 抵扣/超额后付费矩阵。
反唤起信号 / 不该唤起
- 只查询/购买/续费套餐或管理团队席位时转
arkcli-plans。 - 只搜索基础模型、查询用量或价格时分别转
arkcli-models、arkcli-usage、arkcli-pricing。 - 把 arkcli 内嵌 Skills 安装到 Agent 时转
arkcli-connect；不要把“安装 arkcli skill”误判为配置 Harness。 - 仅排查登录、401 或 profile 覆盖问题时转
arkcli-auth/arkcli-config，不要反复重写 Agent 配置。 - 用户问 CC Switch / cc-switch 图形界面里如何选豆包、添加供应商或填写模型槽位，而非要求 ArkCLI 修改本机 Agent 配置时，不走
helper configure；转arkcli-docs查官方 Claude Code/CC Switch 接入正文。按用户实际套餐区分 Key、Base URL 与 Model Name；套餐当前可用模型要以实时查询为准，认证失败时只给标明来源的文档示例，不能冒充实时清单。
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 17d ago Changed · +1 lines 74ec2f95052c
- 23d ago Changed f528afd49db6
- 1mo ago Changed · +1 lines 0ff043c06115
- 1mo ago Changed · +1 lines 59fe7237ddc8
- 1mo ago Changed · +1 lines · +3 tokens per session a20269bc5433
- 1mo ago First seen · 230 lines · 345 tokens per session scan B b91fc970a969
arkcli-helper is a skill published in the GitHub repository volcengine/ark-cli (143 stars, last pushed 8d ago), licensed Apache-2.0. It adds 348 tokens to every session and 9,271 once invoked, about $0.0014 per session on Opus 5.5. A static security scan graded it B with 1 finding (reads agent configuration directories). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
plugin-system
Generic plugin system for Python applications. Auto-discovery, validation, fault tolerance. Zero dependencies (Python stdlib only).
batch-file-ops
Batch-Dateioperationen (Löschen, Verschieben, Kopieren, Auflisten) mit Glob-Mustern. CLI-Werkzeug für effiziente Dateisystem-Operationen. Ohne Abhängigkeiten.
datamol
Pythonic wrapper around RDKit with simplified interface and sensible defaults. Preferred for standard drug discovery including SMILES parsing, standardization, descriptors, fingerprints, clustering, 3D conformers, parallel processing. Returns native rdkit.Chem.Mol objects. For advanced control or custom parameters…
clinicaltrials-database
Query ClinicalTrials.gov via API v2. Search trials by condition, drug, location, status, or phase. Retrieve trial details by NCT ID, export data, for clinical research and patient matching.
openalex-database
Query and analyze scholarly literature using the OpenAlex database. This skill should be used when searching for academic papers, analyzing research trends, finding works by authors or institutions, tracking citations, discovering open access publications, or conducting bibliometric analysis across 240M+ scholarly…
esm
Comprehensive toolkit for protein language models including ESM3 (generative multimodal protein design across sequence, structure, and function) and ESM C (efficient protein embeddings and representations). Use this skill when working with protein sequences, structures, or function prediction; designing novel…