arkcli-infer-endpoint
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill manages cloud resources by executing various subcommands of the
arkcliutility, such ascreate,list,get,start,stop,delete, andupdate. All commands are within the expected scope of a CLI-based management skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes data returned from external services, such as endpoint listings and model search results, which represents a potential attack surface for indirect prompt injection if the service output were to contain malicious instructions.
- Ingestion points: JSON output from
arkcli infer endpoint listandarkcli models search(inSKILL.mdandreferences/arkcli-infer-endpoint-list.md). - Boundary markers: None explicitly defined, but instructions rely on structured JSON parsing rather than natural language interpretation of the raw output.
- Capability inventory: Includes file system writes (via shell redirects), multiple CLI command executions, and local script execution.
- Sanitization: Employs
jqto select specific fields and filter data, which inherently reduces the risk of accidental instruction execution. - [DYNAMIC_EXECUTION]: The skill provides an example of generating and executing a temporary Node.js script to process and format JSON reports. This is used for complex data manipulation (date conversions) that is difficult to achieve with standard shell tools, and the script logic is static and local to the reporting task.
Audit Metadata