Volcengine Ai

火山引擎AI生成与理解API。让Agent能够调用火山引擎方舟的AI能力：图片生成(Seedream-5.0-lite)、视频生成(Seedance-1.5-pro)、图片理解、视频理解。使用前需配置API密钥(VOLCENGINE_API_KEY)。支持异步任务查询。

Security Scan

The skill's instructions match an image/video AI integration, but the SKILL.md contains inconsistencies and risky details (an apparent example API key, a mismatch with registry metadata about required env vars, and questionable endpoint formatting), so verify before installing.

Purpose & Capability

Name/description and the runtime instructions consistently describe calling Volcengine/ArK visual APIs (image/video generation and understanding). However, the registry metadata declares no required env vars or primary credential while the SKILL.md clearly instructs the user to set VOLCENGINE_API_KEY — this mismatch is notable.

Instruction Scope

SKILL.md instructs exporting a specific example API key (looks like a real UUID) and even advises appending it to ~/.bashrc (persistent storage of a secret). The curl examples reference API endpoints and include paths with spaces (e.g., "visual generation") which look malformed/typos. The instructions also hardcode an example API key value rather than using a placeholder.

Install Mechanism

Instruction-only skill with no install spec or code files — minimal install risk. Nothing is written to disk by an installer because there is no installer.

Credentials

The runtime docs require a single API key (VOLCENGINE_API_KEY), which is proportionate for this API integration — but the registry metadata does not declare it, and the SKILL.md includes a concrete example key. Recommending persistence to ~/.bashrc increases risk of secret leakage. Also the domain in examples (ark.cn-beijing.volces.com) and malformed paths should be verified to ensure they point to the intended service.

Persistence & Privilege

The skill does not request always:true and is user-invocable; it does not claim system-wide persistence beyond advising the user to export the API key. No other privilege escalation or modification of other skills is requested.

What to consider before installing

This SKILL.md appears to be an instruction-only integration for Volcengine's visual APIs, but there are several red flags you should address before using it: - Do not copy the example API key from the README into your environment; treat it as potentially leaked or just a placeholder. Replace with your own key only after verifying the skill. - The registry metadata did not declare VOLCENGINE_API_KEY as a required credential — confirm with the skill author or source that the skill truly needs that env var and update metadata accordingly. - Verify the API endpoint domain and URL paths in the curl examples. The paths contain spaces (likely typos) and the hostname (ark.cn-beijing.volces.com) is unusual; confirm these point to the official Volcengine API endpoints. - Avoid storing secrets in plaintext files like ~/.bashrc if you can; use a secrets manager or at least limit file permissions and consider session-only environment variables. - If you need higher confidence: ask the publisher for an official homepage/source repo, corrected SKILL.md with placeholders (not real keys), and an updated registry manifest declaring VOLCENGINE_API_KEY as required. If the publisher cannot provide these, treat the skill as suspicious and avoid installing.

火山引擎 AI

调用火山引擎方舟平台的AI能力。

配置

首先设置环境变量：

export VOLCENGINE_API_KEY="222b33d4-f22f-4f99-b68f-0eb9150ab507"
# 或在 ~/.bashrc 中持久化
echo 'export VOLCENGINE_API_KEY="222b33d4-f22f-4f99-b68f-0eb9150ab507"' >> ~/.bashrc

模型ID

能力	模型ID
图片生成	doubao-seedream-5-0-lite
视频生成	doubao-seedance-1-5-pro-251215
图片理解	doubao-seed-1-8-251228
视频理解	doubao-seed-1-8-251228

核心命令

1. 图片生成 (Seedream)

# 调用火山引擎API生成图片
curl -X POST "https://ark.cn-beijing.volces.com/api/v3/visual generation/tasks" \
  -H "Authorization: Bearer $VOLCENGINE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "doubao-seedream-5-0-lite",
    "prompt": "一只戴墨镜的橘猫",
    "size": "1024x1024",
    "num": 1
  }'

2. 视频生成 (Seedance)

# 提交视频生成任务
curl -X POST "https://ark.cn-beijing.volces.com/api/v3/video generation/tasks" \
  -H "Authorization: Bearer $VOLCENGINE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "doubao-seedance-1-5-pro-251215",
    "prompt": "镜头推进，一只橘猫从沙发上跳下来",
    "duration": 5,
    "ratio": "16:9"
  }'

3. 图片理解

# 图片理解（视觉理解）
curl -X POST "https://ark.cn-beijing.volces.com/api/v3/chat/completions" \
  -H "Authorization: Bearer $VOLCENGINE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "doubao-seed-1-8-251228",
    "messages": [
      {
        "role": "user",
        "content": [
          {"type": "image_url", "image_url": {"url": "https://example.com/image.jpg"}},
          {"type": "text", "text": "描述这张图片"}
        ]
      }
    ]
  }'

4. 视频理解

# 视频理解（使用视频URL）
curl -X POST "https://ark.cn-beijing.volces.com/api/v3/chat/completions" \
  -H "Authorization: Bearer $VOLCENGINE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "model": "doubao-seed-1-8-251228",
    "messages": [
      {
        "role": "user",
        "content": [
          {"type": "video_url", "video_url": {"url": "https://example.com/video.mp4"}},
          {"type": "text", "text": "描述这个视频"}
        ]
      }
    ]
  }'

5. 查询任务结果

对于异步任务（图片/视频生成），需要查询任务状态：

curl -X GET "https://ark.cn-beijing.volces.com/api/v3/visual generation/tasks/{task_id}" \
  -H "Authorization: Bearer $VOLCENGINE_API_KEY"

常用参数

图片生成

• prompt: 描述词
• size: 尺寸，如 "1024x1024"、"16:9"
• num: 生成数量

视频生成

• prompt: 描述词
• duration: 时长（秒）
• ratio: 比例，如 "16:9"、"9:16"

注意事项

1. 生成任务是异步的，需要轮询任务状态
2. 图片/视频理解是同步的，直接返回结果
3. API端点根据区域选择，这里用 cn-beijing