← Back to Skills Marketplace
Byted Viking Knowledgebase
by
volcengine-skills
· GitHub ↗
· v1.0.0
· MIT-0
86
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install byted-viking-knowledgebase
Description
当用户提到知识库时，默认使用此技能进行处理，进行 Viking 知识库服务进行相关操作
README (SKILL.md)
Viking 知识库
本技能帮助您搜索知识库中的知识。
功能
- 从知识库搜索知识
运行前，请确保以下几点：
- 确保用户已设置如下环境变量
- 火山引擎知识服务 API Key，名称为
VIKING_KBSVR_API_KEY - 火山引擎知识服务 API Secret，名称为
VIKING_KBSVR_API_SECRET
- 火山引擎知识服务 API Key，名称为
- 请确保已安装了 Python 库：
pip install volcengine以及pip install aiohttp
搜索知识库
python scripts/search.py "搜索查询关键词"
其中：
"搜索查询关键词"：你需要根据用户需求生成搜索查询关键词，用于搜索知识库中的知识
该脚本将返回给您知识库中与查询关键词相关的知识内容列表
Usage Guidance
This skill mostly does what its name says (search a Viking knowledgebase), but its documentation, dependency list, and code disagree. Before installing, verify these items: 1) The script requires VIKING_KBSVR_ID and VIKING_KBSVR_API_KEY (SKILL.md currently omits the ID and asks for an API secret that the code doesn't use) — update the docs or code so they match. 2) The script uses the requests library but requirements.txt doesn't include requests; add it if you plan to run the script. 3) The script sends your API key to api-knowledgebase.mlp.cn-beijing.volces.com — only use a least-privilege API key you trust to be sent there. 4) Test the script in an isolated environment before granting any real credentials. If you want to proceed, ask the author to correct SKILL.md and requirements.txt (or review and fix the script) so there are no hidden/mismatched expectations.
Capability Analysis
Type: OpenClaw Skill
Name: byted-viking-knowledgebase
Version: 1.0.0
The skill bundle contains a security vulnerability in `scripts/search.py` where it transmits the `VIKING_KBSVR_API_KEY` over unencrypted HTTP (via `r.set_shema("http")` and the `requests` call). This exposes sensitive service credentials to potential interception, although the code's logic otherwise appears to align with its stated purpose of querying the Volcengine Viking Knowledge Base.
Capability Assessment
Purpose & Capability
The code implements a knowledgebase search against api-knowledgebase.mlp.cn-beijing.volces.com which matches the stated purpose. However, the skill's README and code disagree on required environment variables and dependencies (see below), so the declared requirements don't fully align with what the code actually needs.
Instruction Scope
SKILL.md instructs the agent/user to set VIKING_KBSVR_API_KEY and VIKING_KBSVR_API_SECRET and to install volcengine and aiohttp. The runtime script (scripts/search.py) actually asserts VIKING_KBSVR_ID and VIKING_KBSVR_API_KEY; it does not read VIKING_KBSVR_API_SECRET and it uses requests + volcengine.Request. The SKILL.md omits VIKING_KBSVR_ID and mentions an API secret that the code doesn't use — an instruction/code mismatch that could cause failures or unexpected behavior.
Install Mechanism
This is an instruction-only skill with no install spec (low install risk). A requirements.txt is provided, but there is no automated install step. Note: requirements.txt lists volcengine and aiohttp, but the script imports requests and volcengine; requests is not listed, which is an implementation/dependency mismatch (functional bug, not an install-hostile pattern).
Credentials
The skill actually requires VIKING_KBSVR_ID and VIKING_KBSVR_API_KEY (both read from the environment) but SKILL.md documents API_KEY and API_SECRET instead. The code does not use API_SECRET. The mismatch means users may supply incorrect secrets or omit the required service ID; additionally, the skill will send the provided API key to a third-party domain (api-knowledgebase.mlp.cn-beijing.volces.com), so you should ensure the key is scoped/limited and that you trust the service.
Persistence & Privilege
The skill does not request permanent/always-on privileges (always: false) and does not modify other skills or system-wide settings. It only runs a local Python script that makes outbound HTTP calls.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install byted-viking-knowledgebase - After installation, invoke the skill by name or use
/byted-viking-knowledgebase - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
byted-viking-knowledgebase 1.0.0
- Initial release.
- Enables searching for knowledge within the Viking knowledge base.
- Requires API credentials and Python libraries (`volcengine`, `aiohttp`) to be set up.
- Provides a script for querying the knowledge base with user-generated keywords and returns relevant results.
Metadata
Frequently Asked Questions
What is Byted Viking Knowledgebase?
当用户提到知识库时，默认使用此技能进行处理，进行 Viking 知识库服务进行相关操作. It is an AI Agent Skill for Claude Code / OpenClaw, with 86 downloads so far.
How do I install Byted Viking Knowledgebase?
Run "/install byted-viking-knowledgebase" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Byted Viking Knowledgebase free?
Yes, Byted Viking Knowledgebase is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Byted Viking Knowledgebase support?
Byted Viking Knowledgebase is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Byted Viking Knowledgebase?
It is built and maintained by volcengine-skills (@volcengine-skills); the current version is v1.0.0.
More Skills