arkcli-shared
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill implements a standardized protocol for executing the
arkclibinary, requiring specific attribution environment variables (ARKCLI_CALLER_TYPE,ARKCLI_CALLER_NAME,ARKCLI_SKILL_NAME) to be set for every tool invocation to ensure consistent versioning and logging. - [EXTERNAL_DOWNLOADS]: The skill documentation includes instructions for installing and updating the
@volcengine/ark-clipackage via the NPM registry. It also handles the installation of thearkexpexperience tool from the vendor's CDN. As these resources belong to the recognized vendor, they are considered standard operational functionality. - [INDIRECT_PROMPT_INJECTION]: The skill functions as an entry point and router for instructions that process user input to generate CLI commands.
- Ingestion points: User intent strings provided in natural language and the structured outputs (JSON/YAML) from
arkclisubcommands. - Boundary markers: The skill relies on modular sub-skills for specific task execution, and while it mandates structured output parsing, it does not explicitly define prompt delimiters in this shared context.
- Capability inventory: Access to the full range of
arkclifunctions, including account authentication, resource deployment, and profile management. - Sanitization: The skill explicitly forbids manual text-based parsing (e.g., using
sedorhead) and requires the use of structured parsers likejqoryqto process tool output, which serves as a mitigation against schema-based injection attacks.
Audit Metadata