arkcli-plans
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the arkcli binary to perform administrative tasks such as purchasing subscriptions, renewing plans, and managing enterprise seats. These operations involve financial transactions and resource modifications.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data. Ingestion points: User-provided IDs and usernames in seat-assign and buy/renew commands. Boundary markers: The Protocol Gate mechanism requires explicit user agreement to legal terms before execution. Capability inventory: Financial transactions, seat management, and API key rotation. Sanitization: Input validation is managed by the underlying CLI tool.
- [EXTERNAL_DOWNLOADS]: The skill references documentation and legal agreements hosted on Volcengine's official domains to facilitate the subscription and compliance process.
Audit Metadata