Volcengine Ai Text Ark Chat
Analysis
This is a simple Volcengine ARK chat template, but users should notice it uses an ARK API key and sends prompt text to Volcengine.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
curl https://ark.cn-beijing.volces.com/api/v3/chat/completions \
The skill documents a raw HTTP call to the Volcengine ARK chat-completions API. This is central to the stated purpose, but it means the agent may invoke an external service to complete text tasks.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
Verify `ARK_API_KEY`, endpoint ID, and region.
The skill expects access to an ARK API key, while the registry metadata declares no required environment variables or primary credential. The key use is expected for Volcengine ARK, but users should notice the credential requirement.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
"messages": [{"role":"user","content":"请总结这段文本"}]The template places user-provided text into a request body sent to the external ARK API endpoint. This is disclosed and purpose-aligned, but it is still a provider data-flow users should recognize.