volcengine-cli

    Create and manage Volcengine cloud resources using the Volcengine CLI (`ve` command). Supports all Volcengine services including ECS, VPC, CLB, RDS, Redis, and more. Trigger this skill whenever the user asks to create, query, modify, or delete cloud resources on Volcengine, mentions the `ve` command, says "volcengine CLI", or describes infrastructure tasks such as "create an ECS instance", "set up a VPC", "list security groups", "allocate an EIP". Also trigger on Chinese prompts mentioning "火山引擎" or "火山" (e.g., "火山引擎上有哪些 ECS"、"查一下我火山的云服务器"、 "火山引擎创建一个 VPC"、"火山的 Redis 实例列一下"). Also trigger when the user encounters errors from `ve` commands and needs troubleshooting help. Also use for TOS bucket/object operations, tosutil (sometimes written tosutils), Ark CLI / arkcli model discovery, inference, generation, endpoints, fine-tuning, plans, or usage, and TLS (日志服务) / volclog log search, analysis, ingest, export, or LogCollector collection, through `ve tosutil`, `ve arkcli` and `ve volclog`.

    Rank#-1700
    volcengineskills.shCli wrapper135Last updated Oct 21, 2026, 09:43 PMskills.sh/volcengine/volcengine-skills/volcengine-cli
    Created
    5 months ago
    Last commit
    4 days ago
    Latest release
    v1.3.1last week

    Security Findings

    Flagged by the hosting marketplace

    SuspiciousLineage

    the skills.sh security audit flagged this skill (status=fail, risk=high) — Snyk: W007 Insecure credential handling detected in skill instructions. — Insecure credential handling detected (high risk: 0.80). The skill prompt instructs the agent to ask the user for credentials (AK/SK) and passes them to command-line arguments (ve configure set --access-key <AK> --secret-key <SK>), which exposes secrets through process listings and command history.

    Remote code execution pipe

    MaliciousAnalyzer

    Command downloads and pipes to shell: wget -qO- https://cloudcache.volccdn.com/ve/install.sh | sh

    Eval/exec with dynamic content

    SuspiciousAnalyzer

    Dynamic code execution: detach=(perl -MPOSIX -e 'POSIX::setsid(); exec @ARGV or die "exec failed: $!\n";' --)

    Dangerous security bypass flags

    SuspiciousAnalyzer

    Gatekeeper bypass in command: xattr -d com.apple.quarantine "$staged" 2>/dev/null || true

    Versions

    1
    • Scanned Oct 13, 2026, 06:50 AMHigh