byted-util-arkclaw-kb

Warn

Audited by Socket on May 18, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The stated purpose is coherent: a knowledge-base retrieval skill for ArkClaw support questions. However, its actual footprint is broader than a simple search helper because it auto-downloads and runs an external executable and also edits AGENTS.md. Same-vendor Volcengine documentation suggests this may be an official integration path, which lowers maliciousness concerns, but the missing script means the binary provenance, transport security, and integrity checks are not verifiable here. Overall this is best classified as suspicious/high-risk supply-chain exposure rather than confirmed malware.

Confidence: 83%Severity: 78%
Audit Metadata
Analyzed At
May 18, 2026, 06:21 AM
Package URL
pkg:socket/skills-sh/bytedance%2Fagentkit-samples%2Fbyted-util-arkclaw-kb%2F@ab4daddee77fd1809772f49499081158b71d100b
Security Audit — socket — byted-util-arkclaw-kb