Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add volcengine/volcengine-skills --skill volcengine-cloud-trailgit clone --depth 1 https://github.com/volcengine/volcengine-skillsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/volcengine/volcengine-skills/volcengine-cloud-trail)<a href="https://agentmods.dev/skills/volcengine/volcengine-skills/volcengine-cloud-trail"><img src="https://agentmods.dev/badge/skills/volcengine/volcengine-skills/volcengine-cloud-trail/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/volcengine/volcengine-skills/volcengine-cloud-trail"><img src="https://agentmods.dev/badge/skills/volcengine/volcengine-skills/volcengine-cloud-trail.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00098 | $0.02752 |
| Opus 5.5 | $0.00039 | $0.01101 |
| Sonnet 5.5 | $0.00020 | $0.00550 |
| Haiku 4.5 | $0.00010 | $0.00275 |
Grade A, and why
volcengine-cloud-trail scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 177 lines — stays where its author put it; the contents beside it link to each section on GitHub.
火山引擎操作审计
通过 ve cloudtrail（Version=2021-09-01）查询审计事件，并安全管理 Trail 与历史补投任务。
速查
| 项目 | 说明 |
|---|---|
| 适用场景 | 操作审计日志查询、登录/资源操作溯源、Trail 管理、历史补投任务管理 |
| 核心能力 | 审计事件查询（只读）、事件名解析（只读）、Trail 列表/创建/更新/启停/删除、补投列表/详情/创建/停止 |
| 底层调用 | scripts/cloud_trail.py 封装 ve cloudtrail <Action>，版本固定 2021-09-01 |
| 写操作 | Trail 创建/更新/启停/删除、补投创建/停止，均先预览，用户确认后执行 |
| 主要参考 | event-query.md、event-trail-management.md、backfill-delivery-tasks.md |
能力
| 能力 | 做什么 | 子命令 | 必读参考 |
|---|---|---|---|
| 审计事件查询 | 查询登录、资源操作、失败事件，输出摘要或带注释完整日志 | events lookup |
event-query.md |
| 事件名解析 | 根据服务、关键词、资源和读写属性判断 EventSource / EventName 候选 |
events resolve |
event-query.md |
| Trail 管理 | 列出、创建、更新、启停、删除操作审计 Trail | trails ... |
event-trail-management.md |
| 历史补投 | 列出、查看、创建、停止历史补投任务 | backfill ... |
backfill-delivery-tasks.md |
什么时候用
- 用户要查操作审计、审计日志、CloudTrail、登录记录、资源变更记录、失败事件或 RequestID / EventID 对应事件。
- 用户要确认某个火山资源是谁创建、删除、修改，或需要按资源 ID、用户、事件名、错误码定位审计证据。
- 用户要创建、更新、开启、停止或删除操作审计 Trail。
- 用户要查看、创建或停止历史补投任务，或判断补投任务与 Trail 删除之间的依赖。
- 用户消息里出现「火山 / 火山引擎 / volcengine」且属于操作审计、跟踪、Trail、历史补投、CloudTrail 场景。
前置条件
veCLI 与python3可用，并已通过ve configure或环境变量完成鉴权。- 鉴权、profile、CLI 安装或会话失败时，使用
volcengine-cliskill 处理登录/配置；本 skill 只处理 CloudTrail 业务动作。 - 固定 profile 后，身份确认和后续 CloudTrail 调用使用同一 profile。每个会话首次签名调用、重新鉴权或 profile 改变后，先只读确认调用账号。
- 只有用户明确指定时才传
--profile或--region。结论里说明账号、profile/default 解析、地域和时间范围。 - 补投创建能力需要运营开白。账号内已有任一补投任务记录时，可视为当前账号已完成补投能力开白。
agent 内部调用
从本 skill 目录执行：
python3 scripts/cloud_trail.py --help
python3 scripts/cloud_trail.py events lookup --signin-action login --lookback-days 3
python3 scripts/cloud_trail.py events resolve --service vpc --keyword Delete --resource-id vpc-<id> --operation write
python3 scripts/cloud_trail.py trails list
python3 scripts/cloud_trail.py backfill list
What ships with it
4 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 177 lines · 98 tokens per session scan A 23da7ad34707
volcengine-cloud-trail is a skill published in the GitHub repository volcengine/volcengine-skills (22 stars, last pushed 7d ago), licensed MIT. It adds 98 tokens to every session and 2,752 once invoked, about $0.0004 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-16.
Other skills, from other repositories
local-ai-agents
Build local-first AI agents that run entirely on a developer workstation with Microsoft Foundry Local and Qwen function-calling models. Covers Small Language Models (SLMs), the OpenAI-compatible local endpoint, sandboxed local tools, local RAG with Chroma, local MCP servers, hybrid cloud/local routing, and the…
next-cache-components-adoption
Turn on Cache Components in a Next.js app and resolve the blocking routes it surfaces. Use when the user wants to enable, adopt, or migrate to Cache Components, flip the cacheComponents flag, work through a flood of blocking-prerender / instant validation errors, run the cache-components-instant-false codemod, or…
chat-pet-sprite-creation
Use when creating or changing VS Code chat pet sprite art, sprite sheets, state animations, eye treatments, Stable/Insiders variants, or pet transitions under src/vs/workbench/contrib/chat/browser/widget/media/chatPet.
cpu-profile-analysis
Analyze V8/Chrome CPU profiles (.cpuprofile) and DevTools trace files (Trace-.json). Use when: profiling performance, investigating slow functions, comparing code paths, finding bottlenecks, analyzing timeToRequest, understanding call trees from sampling profiler data, analyzing layout/paint/rendering, investigating…
insight-error-page
Write or audit an insight-kind error page for the Next.js dev overlay. Use when creating a new errors/ .mdx page, auditing an existing one, or checking that a page matches the framework fix cards. Covers page structure, title alignment, FixCard cards with Copy prompt button, code snippets, terminology verification…
next-cache-components-optimizer
Optimize the meaningful UI available immediately from a Next.js route on an initial load (hard navigation) or named client-side navigation (soft navigation). Encode the goal as a failing @next/playwright instant() e2e and work it to green, one verified route and entry point at a time; the shipped test then guards…