Volcengine (Volcano Engine)

Configure and use Volcano Engine models like Doubao, GLM, Kimi, and DeepSeek via OpenClaw for general, coding, and troubleshooting tasks.

This package looks like a real Volcengine integration, but there are several mismatches you should consider before installing or running any scripts: - Treat API keys as sensitive: the skill requires a Volcengine API key (documents reference VOLCANO_ENGINE_API_KEY and openclaw.json apiKey). The registry metadata erroneously lists no required env vars—assume an API key is required and do not paste keys into public places. Prefer setting keys in your system secret store or environment variables, not in repo files. - Inconsistency in key format: SKILL.md and references disagree on whether the key includes an 'sk-' prefix. Verify the expected format with the official Volcengine console before using your production key. - Do not run scripts blindly: the repository includes extraction and scraping scripts (Python and PowerShell, and guidance to use Playwright). These perform network access and automation; review their source code carefully for unexpected network endpoints or data exfiltration before running. If you do need to run them, do so in a sandboxed environment and with a non-privileged/test API key. - Tooling mismatch: README and scripts assume Node and PowerShell (and possibly Playwright) but package.json has no dependencies declared and the registry metadata lists no required binaries. Ensure you have the expected runtime and inspect package.json/scripts for required packages before executing npm install or pwsh scripts. - Verify origin and trust: Homepage is missing and source is 'unknown' while owner ID is an opaque string. Prefer installing skills from trusted publishers or confirm the repository origin (GitHub link in package.json points to a large repo; check the exact repo/directory and commit history). If you want to proceed: 1) Inspect scripts (scripts/*.ps1, references/*.py) for network endpoints and secrets handling; 2) Use a disposable/test API key; 3) Run commands in an isolated VM/container; 4) Prefer to manually configure openclaw.json using environment variables rather than running automated scripts that modify config. If anything in the scripts looks surprising, ask the publisher to justify the behavior or provide a trimmed distribution that only includes the runtime SKILL.md and minimal helper scripts.

Type: OpenClaw Skill Name: volcano-engine Version: 1.1.2 The bundle is a comprehensive and well-documented integration for Volcano Engine (Volcengine) models. It includes detailed configuration guides, model references, and several Python utility scripts (such as extract-high-priority.py and extract_pages.py) designed to extract text from official API reference PDFs to ensure documentation accuracy. While some scripts contain hardcoded absolute Windows file paths (e.g., referencing 'C:\Users\Andapeng\...'), these represent non-portable coding practices rather than malicious intent. There are no signs of data exfiltration, unauthorized network activity, or prompt injection targeting the OpenClaw agent.