arkcli-doctor

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill facilitates the execution of various arkcli doctor commands to retrieve structured diagnostic data, metrics, and health reports for Ark resources. These commands are primarily read-only and intended for troubleshooting purposes.
  • [PRIVILEGE_ESCALATION]: The documentation advises the agent to suggest sudo commands to the user for system clock synchronization (NTP) to fix authentication errors (InvalidTimestamp). The skill explicitly requires user confirmation and manual execution for these high-privilege actions.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external media URLs and resource identifiers. To mitigate potential manipulation from these inputs, the skill mandates strict boundary markers, including a fee disclosure step and a final explicit user confirmation before executing verification tasks.
  • [SAFE]: The external dependencies and commands referenced, including the @volcengine/ark-cli package and volcengine.com endpoints, belong to the verified skill author's organization. Accessing sensitive account data like balances and IAM policies is within the intended scope of a diagnostic tool for this platform.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 12:11 PM