volcengine-cli

SUSPICIOUS. The core Volcengine CLI usage is coherent and mostly benign, with official same-org install sources and proportionate cloud credentials. Risk is elevated because the skill can perform destructive infrastructure actions and, more importantly, it instructs the agent to install additional skills from a registry/GitHub, creating transitive trust beyond the main skill.