arkcli-custommodel
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to wrap the
arkclicommand-line interface for model management. It provides structured guidance for subcommands such aslist,get,upload,update,delete, andquantize. The instructions emphasize safe execution patterns, such as using--dry-runfor previews and requiring user confirmation before performing write or delete operations. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it ingests and processes output from external command executions and interacts with user-defined resources like TOS buckets and model metadata.
- Ingestion points: CLI output from
arkclicommands (JSON, CSV, and Table formats) as described inSKILL.mdand reference documents. - Boundary markers: The skill does not define string-based boundary markers for its own prompts but relies on structured data formats (
--format json) to separate control and data planes. - Capability inventory: The skill utilizes
arkclifor cloud resource management and local tools likejqorsedfor data parsing. It can perform file system reads to inspect reference documentation. - Sanitization: The skill mandates explicit validation steps, such as checking the
active_endpointsfield viaarkcli models custommodel get --transform active_endpointsbefore allowing a deletion, which reduces the risk of unintended consequences from malicious or malformed model metadata.
Audit Metadata