Volcengine Ai Text Ark Chat

PassAudited by ClawScan on May 1, 2026.

Overview

This is a simple Volcengine ARK chat template, but users should notice it uses an ARK API key and sends prompt text to Volcengine.

Before installing, make sure you are comfortable giving the agent access to a Volcengine ARK API key and sending task text to Volcengine. Prefer scoped credentials, keep keys in environment variables, and avoid using the skill for sensitive text unless your provider agreement permits it.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your agent may send task content to Volcengine ARK when using this skill.

Why it was flagged

The skill documents a raw HTTP call to the Volcengine ARK chat-completions API. This is central to the stated purpose, but it means the agent may invoke an external service to complete text tasks.

Skill content
curl https://ark.cn-beijing.volces.com/api/v3/chat/completions \
Recommendation

Use the skill only for content you are comfortable sending to Volcengine, and review requests when handling sensitive text.

What this means

An ARK API key can authorize usage of your Volcengine account and may incur provider usage costs.

Why it was flagged

The skill expects access to an ARK API key, while the registry metadata declares no required environment variables or primary credential. The key use is expected for Volcengine ARK, but users should notice the credential requirement.

Skill content
Verify `ARK_API_KEY`, endpoint ID, and region.
Recommendation

Store the key securely as an environment variable, use the least-privileged or scoped key available, and avoid pasting the key into chat content.

What this means

Prompt text, documents, or summaries provided for processing may be transmitted to Volcengine ARK.

Why it was flagged

The template places user-provided text into a request body sent to the external ARK API endpoint. This is disclosed and purpose-aligned, but it is still a provider data-flow users should recognize.

Skill content
"messages": [{"role":"user","content":"请总结这段文本"}]
Recommendation

Do not use this skill for confidential, regulated, or proprietary text unless your Volcengine data-handling terms allow it.