byted-util-arkclaw-kb
Warn
Audited by Socket on May 18, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The stated purpose is coherent: a knowledge-base retrieval skill for ArkClaw support questions. However, its actual footprint is broader than a simple search helper because it auto-downloads and runs an external executable and also edits AGENTS.md. Same-vendor Volcengine documentation suggests this may be an official integration path, which lowers maliciousness concerns, but the missing script means the binary provenance, transport security, and integrity checks are not verifiable here. Overall this is best classified as suspicious/high-risk supply-chain exposure rather than confirmed malware.
Confidence: 83%Severity: 78%
Audit Metadata