arkcli-helper
Warn
Audited by Socket on Sep 7, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill’s purpose mostly matches its capabilities, but its footprint is large: it modifies many local agent configs, installs external tooling, and forwards Plan/identity credentials into installed skills and CLI profiles. Same-org provenance lowers the chance of outright malware, yet the unpinned `npx @latest` install and broad credential/config reach make this higher-risk than a typical documentation or helper skill.
Confidence: 88%Severity: 61%
Audit Metadata