byted-util-arkclaw-kb

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). This skill explicitly downloads and executes a remote search client and mandates querying the ArkClaw public knowledge base (scripts/search_knowledge.py uses SEARCH_CLIENT_URL https://arkclaw-support.tos-cn-beijing.volces.com/search_client and the SKILL.md forces using the KB results) and requires the agent to read and prioritize those external search results when answering, so external/untrusted KB content can influence agent decisions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's runtime script downloads a required executable from https://arkclaw-support.tos-cn-beijing.volces.com/search_client (using MD5 from https://arkclaw-support.tos-cn-beijing.volces.com/md5.txt) and then executes that binary via subprocess, so remote content directly controls executed code.