arkcli-doctor
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of various
arkcli doctorcommands to retrieve structured diagnostic data, metrics, and health reports for Ark resources. These commands are primarily read-only and intended for troubleshooting purposes. - [PRIVILEGE_ESCALATION]: The documentation advises the agent to suggest
sudocommands to the user for system clock synchronization (NTP) to fix authentication errors (InvalidTimestamp). The skill explicitly requires user confirmation and manual execution for these high-privilege actions. - [INDIRECT_PROMPT_INJECTION]: The skill processes external media URLs and resource identifiers. To mitigate potential manipulation from these inputs, the skill mandates strict boundary markers, including a fee disclosure step and a final explicit user confirmation before executing verification tasks.
- [SAFE]: The external dependencies and commands referenced, including the
@volcengine/ark-clipackage andvolcengine.comendpoints, belong to the verified skill author's organization. Accessing sensitive account data like balances and IAM policies is within the intended scope of a diagnostic tool for this platform.
Audit Metadata