arkcli-resources

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard CLI commands such as arkcli resources list and arkcli profile show. These commands are used as intended for querying the state of the Volcengine environment and do not involve arbitrary or dangerous command injection.
  • [DATA_EXPOSURE]: While the skill interacts with profile.yaml and involves authentication via arkcli auth login, these are standard operations for the tool's functionality. The skill explicitly states it is 'read-only' and does not write to the configuration file, reducing the risk of accidental profile corruption or credential exposure.
  • [SAFE]: No obfuscation, remote code execution, or malicious persistence mechanisms were detected. The skill follows standard modular design, referencing other local skill files for shared functionality like authentication.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 02:03 AM
Security Audit — agent-trust-hub — arkcli-resources