byted-util-ark-cua

SUSPICIOUS: the skill's broad remote-operation purpose is internally coherent, but its footprint is high risk. It routes authentication and delegated actions through a bundled local CLI and remote gateway, forwards credentials into a cloud desktop/credential-agent workflow, and combines untrusted remote content with action-taking capability. The documentation includes useful guardrails, but without verifiable CLI provenance and with credential sync plus desktop control in scope, this should be treated as a high-risk vulnerable skill rather than clearly benign.

This module is a signed, TLS-only bootstrapper/updater that downloads a release manifest and an artifact, verifies the manifest with Ed25519, verifies the artifact SHA-256, then atomically installs and smoke-tests the resulting executable. While executing a downloaded binary is inherently high-risk in general, this wrapper includes several strong supply-chain defenses (no redirects, strict HTTPS origin validation, object key/path validation, size limits, Ed25519 signature verification, and SHA-256 integrity checks). No explicit malware behaviors (exfiltration, backdoors, keylogging, cryptomining, or destructive actions) are evident from the provided code.

No direct malware indicators are present in this wrapper code (no obfuscation, no eval/exec, no credential theft/exfiltration logic). However, it is security-sensitive due to (1) executing an externally provided or bootstrapped agent binary without cryptographic integrity verification, and (2) triggering remote artifact retrieval via a hardcoded external artifact-base URL during browser prepare. The main risk is supply-chain compromise at the bootstrap/agent/artifact trust boundary rather than malicious behavior implemented in this module itself.