volcengine-cloud-trail SKILL.md skillA
volcengine-cloud-trail from volcengine/volcengine-agent-toolkit is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add volcengine/volcengine-agent-toolkit/volcengine-cloud-trail@v1.1.0Pins v1.1.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- volcengine/volcengine-agent-toolkit
- Path
plugins/volcengine-security/skills/volcengine-cloud-trail/SKILL.md- Versions recorded
- 5
- Latest version
- v1.1.0, committed Nov 5, 2026
- First version recorded
- Sep 14, 2026
- Size
- 6,292 bytes
- Repository stars
- 26
- License
- MIT
当用户需要查询火山引擎 CloudTrail 审计日志、调查登录或资源操作、分析或导出已投递到 TLS 的审计日志、导出已投递到 TOS 的审计日志、管理检索模板，或开通、调整、排查审计日志投递及管理历史补投任务时使用。 在火山引擎语境下，出现“操作审计、审计日志、日志检索、CloudTrail、cloud_trail、trail、跟踪、审计日志投递、历史补投、backfill”等词时触发。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 火山引擎操作审计 帮助用户完成审计日志查询、溯源、分析、导出，以及检索模板、跟踪和历史补投管理。 ## 执行入口 先读取 [账号与操作规则](references/rules.md)，再按下表读取本次操作的参考；已经读过且仍适用的说明不必重复读取。 ## 能力与使用方式 | 用户需求 | 使用方式 | 必读参考 | | --- | --- | --- | | 近 90 天的事件查询、详情或小规模结果导出，且条件组合受支持 | 基础检索；单次查询最多 50 条，基础导出最多 200 条 | [event-query.md](references/event-query.md) | | 确定产品事件源、事件名或操作含义 | 事件名解析，按需结合官方资料核实 | [event-query.md](references/event-query.md) | | 复杂条件或 SQL 统计，且已有覆盖所查时段的 TLS 日志 | TLS 高级检索 | [advanced-query.md](references/advanced-query.md) | | 全部匹配日志或当前页导出不足 | 按筛选条件、结果数量和已有日志覆盖选择基础导出或下载已投递的日志，详见“路径选择” | [result-export.md](references/result-export.md)，缺少已投递的日志需补投时读 [backfill-delivery-tasks.md](references/backfill-delivery-tasks.md) | | 超过 90 天的事件查询 | 先查已有 TLS／TOS 日志及保留时间，再选择检索或下载；见“查找已投递的日志” | [result-export.md](references/result-export.md#查找已投递的日志) | | 开通、调整或停止审计日志投递，排查投递异常 | 跟踪与投递管理，包含 TOS 存储桶或 TLS 日志主题的准备和日志到达验证 | [event-trail-management.md](references/event-trail-management.md) | | 保存指定历史时段日志或管理补投任务 | 历史补投管理 | [backfill-delivery-tasks.md](references/backfill-delivery-tasks.md) | | 查找、使用或管理检索模板 | 模板管理；仅管理模板时，无需检查历史日志是否齐全 | [search-templates.md](references/search-templates.md) | …
Read the whole file at its exact version.
How to install
mdr add volcengine/volcengine-agent-toolkit/volcengine-cloud-trail@sha256:a350cb94842ebac9The line at the top of this page pins the label v1.1.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_r5ft36tx664rqxef)
0 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Sep 14, 2026 and Nov 5, 2026, about one every 13 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.1.0 latest | 2026-11-05 | 5902841 | 6,292 B | A | view · diff |
| v1.1.0 | 2026-11-05 | 8f016cc | 6,189 B | A | view · diff |
| v1.1.0 | 2026-11-05 | 23c2d3b | 6,083 B | A | view · diff |
| v1.0.0 | 2026-11-05 | f52e930 | 5,772 B | A | view · diff |
| v1.0.0 | 2026-09-14 | 8bf6ebf | 10,448 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6292 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
volcengine/volcengine-agent-toolkit · 26 stars · license MIT · pushed 2026-11-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_r5ft36tx664rqxef GET https://markdownregistry.com/api/v1/resolve?ref=volcengine/volcengine-agent-toolkit/volcengine-cloud-trail GET https://markdownregistry.com/api/v1/blob/a350cb94842ebac934fd68e9987bb73b499c901ca4f00351cbf6b87b31faf24a
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.