Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add volcengine/volcengine-skills --skill volcengine-cligit clone --depth 1 https://github.com/volcengine/volcengine-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/volcengine/volcengine-skills/volcengine-cli)<a href="https://agentmods.dev/skills/volcengine/volcengine-skills/volcengine-cli"><img src="https://agentmods.dev/badge/skills/volcengine/volcengine-skills/volcengine-cli/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/volcengine/volcengine-skills/volcengine-cli"><img src="https://agentmods.dev/badge/skills/volcengine/volcengine-skills/volcengine-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00279 | $0.10837 |
| Opus 5.5 | $0.00112 | $0.04335 |
| Sonnet 5.5 | $0.00056 | $0.02167 |
| Haiku 4.5 | $0.00028 | $0.01084 |
Grade C, and why
volcengine-cli scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://cloudcache.volccdn.com/ve/install.sh | sh Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://cloudcache.volccdn.com/ve/install.sh | sh How it starts
The opening of the file, as written. The whole thing — 699 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Volcengine CLI Skill
Use ve as the unified entry point for Volcengine OpenAPIs, TOS object operations, Ark product workflows, and TLS log service workflows.
Agent caller metadata (mandatory)
Every ve process launched by an Agent must receive these environment variables, including
help/version checks, authentication, API calls, retries, polling, and ve tosutil / ve arkcli / ve volclog:
| Variable | Required value |
|---|---|
VE_CALLER_TYPE |
Always ai_agent. |
VE_CALLER_NAME |
Resolve the actual Agent host identifier from the current runtime environment. This identifies the Agent application, not a model, account, user, or session. |
VE_SKILL_NAME |
Resolve the name in the active Volcengine skill's frontmatter for the workflow executing this command. Use that actual volcengine-* name. |
Set these values yourself; they are runtime attribution, not credentials or a user setup step.
Only VE_CALLER_TYPE=ai_agent is fixed. Resolve both the current host and active skill before each
execution; neither has a hardcoded default. For example, codex is valid only when the current
Agent is Codex, and volcengine-cli only when that skill owns the current operation. Resolve the
values again when the Agent environment or active skill changes. Shared helpers and upstream
product CLIs inherit the actual calling Volcengine skill's identity; their executable names or
installation directories do not determine it.
Supply all three through the tool's process environment or command-local assignments on every
execution. A new tool call may start a fresh shell, so an earlier export is not sufficient.
For a multi-command shell block, export all three at the beginning of that block and update the
skill name before switching workflows. Put assignments before the executable; these are not CLI
flags, API parameters, or fields to add to a request body. Never add the VOLCENGINE_SAFETY_*
variables to this prefix (§2).
For pipelines and $(...), set the variables on the ve process itself or export them in that
same shell before running the pipeline or expanding the command substitution.
What ships with it
26 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/alb.md 1011 B
- references/clb.md 714 B
- references/cloudcontrol.md 14 KB
- references/common-errors.md 8.4 KB
- references/console-login.md 10 KB
- references/cr.md 1.9 KB
- references/dns-edge.md 785 B
- references/ebs.md 498 B
- references/ecs.md 5.4 KB
- references/extend-apis.md 18 KB
- references/iam.md 1.5 KB
- references/kms.md 718 B
- references/mq.md 920 B
- references/natgateway.md 708 B
- references/observability.md 911 B
- references/rds.md 2.0 KB
- references/redis.md 2.2 KB
- references/storage.md 761 B
- references/vefaas.md 706 B
- references/vke.md 2.0 KB
- references/vpc.md 2.1 KB
- scripts/audit_extend_apis.py 7.1 KB runs code
- scripts/call_extend_api.py 30 KB runs code
- scripts/find_api.py 3.0 KB runs code
- scripts/install_ve.sh 12 KB runs code
- scripts/ve_login_remote.sh 19 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago Changed · +55 lines 1316aeede2db
- 25d ago Changed · +15 lines · +30 tokens per session 9a1fbb5ef29f
- 1mo ago Changed · +169 lines · +52 tokens per session 757a995936cb
- 1mo ago Changed · +43 lines scan A → C 325c92a8aebb
- 1mo ago First seen · 417 lines · 197 tokens per session scan A e27444b973b9
volcengine-cli is a skill published in the GitHub repository volcengine/volcengine-skills (22 stars, last pushed 7d ago), licensed MIT. It adds 279 tokens to every session and 10,837 once invoked, about $0.0011 per session on Opus 5.5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-01.
Other skills, from other repositories
google-cloud-storage-fuse
Mounts Cloud Storage buckets on Google Cloud as a POSIX file system using Cloud Storage FUSE (and the gcsfuse CLI tool). Use when interacting with the gcsfuse CLI or Cloud Storage FUSE mounts: decide whether FUSE, native gs:// reads, or Filestore/Managed Lustre fits a workload, deploy tuned mounts on GKE, Compute…
mirrord-db-branching
Helps users configure mirrord.json for database branching, enabling isolated database copies for safe development and testing. Use when the user wants to set up MySQL, MariaDB, PostgreSQL, MSSQL, MongoDB, Redis, DynamoDB, ClickHouse, Google Spanner, Amazon S3, turbopuffer, or generic branches, configure copy modes…
azure-resource-manager-redis-dotnet
Azure Resource Manager SDK for Redis in .NET. Use for MANAGEMENT PLANE operations: creating/managing Azure Cache for Redis instances, firewall rules, access keys, patch schedules, linked servers (geo-replication), and private endpoints via Azure Resource Manager. NOT for data plane operations (get/set keys, pub/sub) …
edgeone-makers-storage
KV and Blob storage services on EdgeOne Makers. KV for edge key-value pairs, Blob for file/object storage in Cloud Functions. Covers SDK usage, setup, and troubleshooting.
aws-cloudformation-elasticache
Provides AWS CloudFormation patterns for ElastiCache Redis or Memcached infrastructure, including subnet groups, parameter groups, security controls, and cross-stack outputs. Use when designing cache tiers, high-availability replication groups, encryption settings, or reusable CloudFormation templates for application…
cis-aws-database-5.11
Ensure ElastiCache has Cluster Mode Enabled.