byted-util-arkclaw-kb
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONPERSISTENCEPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/search_knowledge.pydownloads a search client binary from the official support domain for ArkClaw knowledge base services. - [REMOTE_CODE_EXECUTION]: The skill executes the downloaded binary via
subprocess.runto process user queries. The script implements security best practices by verifying the file's MD5 checksum against a remote reference before execution. - [PERSISTENCE]: The script modifies the workspace configuration file located at
/root/.openclaw/workspace/AGENTS.mdto inject policy instructions. This ensures that the requirement to use the knowledge base persists across different sessions within the environment. - [PROMPT_INJECTION]: The skill instructions utilize high-priority directives, such as 'MUST call this skill BEFORE answering' and 'Strictly prohibited' clauses, to override the agent's default decision-making logic and ensure reliance on the retrieved knowledge base evidence.
Audit Metadata