arkcli-helper

Warn

Audited by Socket on Sep 7, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS. The skill’s purpose mostly matches its capabilities, but its footprint is large: it modifies many local agent configs, installs external tooling, and forwards Plan/identity credentials into installed skills and CLI profiles. Same-org provenance lowers the chance of outright malware, yet the unpinned `npx @latest` install and broad credential/config reach make this higher-risk than a typical documentation or helper skill.

Confidence: 88%Severity: 61%
Audit Metadata
Analyzed At
Sep 7, 2026, 04:05 PM
Package URL
pkg:socket/skills-sh/volcengine%2Fark-cli%2Farkcli-helper%2F@ebabb7fbb3e74a2b199e9e4a9d2068c9c99896acc932ee7beccc9013bb8c949d
Security Audit — socket — arkcli-helper