byted-util-arkclaw-kb

SUSPICIOUS。技能目的本身合理，但其核心实现依赖自动下载并执行一个目前无法公开验证来源的 search_client 二进制，且还会修改 AGENTS.md。能力范围与检索用途部分不成比例，数据流与安装来源透明度不足；未见明确恶意窃密证据，但应按高风险供应链技能处理。

This code is a high-risk runtime installer and launcher. Its primary security concern is execution of a remotely downloaded native binary authenticated only by MD5, with download URLs and checksums configurable through environment variables. It also persistently modifies an AGENTS.md file to force future agent behavior, resembling prompt/instruction injection and package persistence. The Python fragment alone does not demonstrate data theft or a reverse shell, but the downloaded binary is an opaque execution payload and should not be trusted without independent verification, source review, and cryptographic signature validation.