Byted Market Insight Agent

Guidance

This skill appears to implement a legitimate Volcengine Insight client, but you should be aware of and accept a few privacy/security tradeoffs before installing: - It will look for credentials in your environment and will read simple `export VAR=VALUE` lines from shell rc files in your home directory (only specific ARK_/VOLCSTACK_ variables). If you keep secrets in rc files, they may be discovered by the skill. - If no credentials are available, the skill will persist credentials you (or the agent) provide into persist/auth.json in the skill folder — unencrypted. If you do not want credentials written to disk, do not use the minimal-ask flow or remove/secure that file after use. - The skill may auto-install the official `volcengine-python-sdk` via pip when the SDK path is needed. If you wish to avoid on-the-fly installs, run in an isolated environment or pre-install the SDK yourself; check for an env var like MARKET_INSIGHT_AUTO_PIP to disable auto-install (quick_validate references this var). - Debug logs include a snippet of HTTP response bodies (up to 500 chars), which could reveal sensitive data. If you run this in a shared or production environment, redirect or suppress debug output and inspect gateway_provider._debug_response_summary behavior. Recommended mitigations before use: 1) Review the code (auth_resolver.ensure_sdk_available and logging) in full and decide whether to allow auto pip installs. 2) Run the skill in an isolated virtualenv/container and pre-install the SDK if needed. 3) Ensure persist/ is placed on secure storage (or remove persist/auth.json and persist/state.json when finished), and restrict file permissions. 4) Avoid storing other secrets in your rc files, or remove those exports before running the skill. 5) If you require stronger protections, request the vendor provide an option to store credentials encrypted or to disable persistence and rc scanning. If you want, I can point out the exact lines that log response bodies and the locations where the skill writes credentials so you can audit or patch them.