arkcli-chat
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
arkclibinary and standard system utilities likejq,tr, andcatto manage model interactions and parse results. These operations are consistent with the skill's function as a CLI wrapper for cloud services and align with the vendor's documented workflow. - [DATA_EXFILTRATION]: The skill allows the agent to upload local files (images, audio, video) to the Volcengine ARK file service via the
@fileinput mechanism. This is the core intended behavior for multimodal processing and is explicitly documented as a data transfer to the vendor's platform. - [EXTERNAL_DOWNLOADS]: The skill supports passing remote HTTP/HTTPS URLs as inputs to the model service, enabling the processing of web-hosted content as part of the chat and reasoning workflow. These references are treated as input data for the vendor's model API.
Audit Metadata