Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Loading npm security reports…

@byteplus/ark-cli@1.0.15: Suspicious npm security report (Warn) | LPM Firewall

Skip to main content

Threat feed How it works Policy

Threat feed How it works Policy

Flagged as agent extension risk

Allowed by default with warning: install-time first-party agent extension setup was detected.

View on npm All versions Policy details

registry / @byteplus/ark-cli / 1.0.15

@byteplus/ark-cli@1.0.15

BytePlus Ark command-line interface

AI Security Review

scanned 19d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. At npm postinstall, the package downloads a verified native CLI and invokes its non-interactive Skill refresh command. The native payload is not included in the package source, so its agent-side effects cannot be directly established here.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall outside CI when ARKCLI_SKIP_POSTINSTALL is not set

Impact

May synchronize this vendor's Skills into supported local AI agents during installation.

Mechanism

verified remote binary download followed by install-time native CLI execution

Rationale

This is a guarded first-party agent Skill setup executed at install time, not a demonstrated malicious chain. Warn because the native executable performs the refresh and is not source-inspectable in this package.

Evidence

package.jsonmanifest.jsonscripts/postinstall.jsREADME.mdbin/arkcli-${platform}-${arch}[.exe]bin/arkcli-${platform}-${arch}[.exe].download-${process.pid}bin/arkcli-${platform}-${arch}[.exe].backup

Network endpoints2

sf16-sg.tiktokcdn.com/obj/eden-sg/psjryh/ljhwZthlaukjlkulzlp/prod/1.0.15/arkcli-1.0.15-linux-amd64github.com/byteplus-sdk/ark-cli/releases/download/v1.0.15/arkcli-1.0.15-linux-amd64

© 2026 LPM Firewall

Product

Threat feed How it works Policy

LPM

LPM.dev Registry

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

postinstall downloads a platform binary and executes it with `+connect --refresh`.
The install-time command is described as synchronizing Skills into supported local agents.

Evidence against

Downloaded binaries are pinned to manifest SHA-256 values before installation.
The loader requires HTTPS and restricts initial GitHub fallback URLs to the package repository.
Source only writes the package-local `bin/` binary; no foreign agent-config path is present in inspected JS.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetwork

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 2 file(s), 13.5 KB of source

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/postinstall.jsView file

12const path = require("path"); L13: const { execFileSync } = require("child_process"); L14: const { Transform, pipeline } = require("stream");

High

Child Process

Package source references child process execution.

scripts/postinstall.jsView on unpkg · L12

9const fs = require("fs"); L10: const http = require("http"); L11: const https = require("https"); L12: const path = require("path"); L13: const { execFileSync } = require("child_process"); L14: const { Transform, pipeline } = require("stream"); ... L21: L22: if (process.env.ARKCLI_SKIP_POSTINSTALL === "1") { L23: process.exit(0);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/postinstall.jsView on unpkg · L9

364const stdio = tty === null ? "inherit" : ["ignore", tty, tty]; try { execFileSync(binPath, ["+connect", "--refresh"], { stdio });

Medium

Suspicious Lifecycle Evidence

postinstall downloads a platform binary and executes it with `+connect --refresh`.

scripts/postinstall.jsView on unpkg · L364

README.mdView file

11After installing the CLI, authenticate and install the bundled Skills into the supported local agents: ```shell arkcli auth login arkcli auth status arkcli +connect ```

Medium

Ai Review Evidence

The install-time command is described as synchronizing Skills into supported local agents.

README.mdView on unpkg · L11

Findings

3 High5 Medium2 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processscripts/postinstall.js

HighSame File Env Network Executionscripts/postinstall.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumNetwork

MediumEnvironment Vars

MediumSuspicious Lifecycle Evidencescripts/postinstall.js

MediumAi Review EvidenceREADME.md

LowScripts Present

LowFilesystem

86%Warn

Verdict confidence

IntentDangerous Capability

TypeAgent extension lifecycle risk

False-positive riskLow

Review stagesource_first_review

Firewall policyWarn-only agent extension risk

Package metadata

npm

Maintainersbytednpm, xiujie.1, zyqhi +9

Version1.0.24

PublishedAug 14, 2026

LicenseApache-2.0

Dependencies0

Integrityverified

Package size9.80 KB

Files6

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsbin → arkcli

Runtimenode >=16os darwin, linux, win32cpu x64, arm64

Artifact30.4 KB · 6 files1 signature(s)

Install lifecyclepostinstall

Behavioral surface

ChildProcessCryptoEnvironmentVarsFilesystemNetworkSupply chain: cleanManifest: clean

LPM CLI

Source & flagged code

6 flagged

package.jsonView file

Lines 1-36json

1{

2 "name": "@byteplus/ark-cli",

3 "version": "1.0.15",

4 "description": "BytePlus Ark command-line interface",

5 "bin": {

6 "arkcli": "scripts/run.js"

7 },

8 "files": [

9 "scripts/run.js",

10 "scripts/postinstall.js",

11 "manifest.json",

12 "README.md",

13 "LICENSE"

14 ],

15 "scripts": {

16 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L16

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L16

17 },

18 "arkcli": {

19 "product": "arkcli-bp",

20 "teaAppId": 1044680,

21 "teaUrl": "https://sgali-mcs.byteoversea.com/list"

22 },

23 "publishConfig": {

24 "access": "public",

25 "registry": "https://registry.npmjs.org/"

26 },

27 "engines": {

28 "node": ">=16"

29 },

30 "os": [

31 "darwin",

32 "linux",

33 "win32"

34 ],

35 "cpu": [

36 "x64",

scripts/postinstall.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2"use strict";

3

4// Install the BytePlus binary from the manifest's SG CDN source first, then

5// fall back to the matching byteplus-sdk/ark-cli GitHub Release asset. Both

6// sources must match the same immutable SHA-256 digest.

7

8const crypto = require("crypto");

README.mdView file

Lines 1-31markdown

1# BytePlus Ark CLI

2

3BytePlus Ark CLI provides command-line access and Agent Skills for BytePlus Ark. This repository contains the public English Skills distributed with the CLI and the documentation required to use them from supported AI coding agents.

4

5## Install

6

7```shell

8npm install -g @byteplus/ark-cli@latest

9```

10

9const fs = require("fs");

10const http = require("http");

11const https = require("https");

12const path = require("path");

13const { execFileSync } = require("child_process");

14const { Transform, pipeline } = require("stream");

High

Child Process

Package source references child process execution.

scripts/postinstall.jsView on unpkg · L12

15

16const PACKAGE_NAME = "@byteplus/ark-cli";

17const GITHUB_RELEASE_PREFIX = "/byteplus-sdk/ark-cli/releases/download/";

18const MAX_REDIRECTS = 5;

19const MAX_BINARY_BYTES = 256 * 1024 * 1024;

20const DEFAULT_DOWNLOAD_TIMEOUT_MS = 30_000;

21

22if (process.env.ARKCLI_SKIP_POSTINSTALL === "1") {

23 process.exit(0);

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

scripts/postinstall.jsView on unpkg · L9

24}

25

26const platformMap = { darwin: "darwin", linux: "linux", win32: "windows" };

27const archMap = { x64: "amd64", arm64: "arm64" };

28const platform = platformMap[process.platform];

29const arch = archMap[process.arch];

30if (!platform || !arch) {

31 console.error(`${PACKAGE_NAME}: unsupported platform ${process.platform}-${process.arch}`);

32 process.exit(1);

Lines 344-384javascript

344 fs.rmSync(binPath, { force: true });

345 }

346 if (oldMoved && fs.existsSync(backupPath)) {

347 fs.renameSync(backupPath, binPath);

348 }

349 throw new Error(`cannot install verified binary: ${err.message || err}`);

350 }

351

352 console.log(`${PACKAGE_NAME}: installed ${path.basename(binPath)} from ${installedFrom.kind}`);

353

354 if (process.env.CI === "true" || process.env.CI === "1") {

355 return;

356 }

357

358 let tty = null;

359 try {

360 tty = fs.openSync("/dev/tty", "r+");

361 } catch (_) {

362 // A controlling terminal is optional; +connect is still non-interactive.

363 }

364 const stdio = tty === null ? "inherit" : ["ignore", tty, tty];

365 try {

366 execFileSync(binPath, ["+connect", "--refresh"], { stdio });

Medium

Suspicious Lifecycle Evidence

postinstall downloads a platform binary and executes it with `+connect --refresh`.

scripts/postinstall.jsView on unpkg · L364

367 } catch (err) {

368 const message =

369 `${PACKAGE_NAME}: Skill sync skipped (${err.message || err}). ` +

370 "Run `arkcli +connect --refresh` to retry.";

371 if (tty === null) {

372 console.warn(message);

373 } else {

374 try {

375 fs.writeSync(tty, `${message}\n`);

376 } catch (_) {}

377 }

378 } finally {

379 if (tty !== null) {

380 try {

381 fs.closeSync(tty);

382 } catch (_) {}

383 }

384 }

11After installing the CLI, authenticate and install the bundled Skills into the supported local agents:

12

13```shell

14arkcli auth login

15arkcli auth status

16arkcli +connect

17```

Medium

Ai Review Evidence

The install-time command is described as synchronizing Skills into supported local agents.

README.mdView on unpkg · L11

18

19BytePlus CLI state is stored separately under `~/.arkcli-bp`.

20

21## Skills

22

23The [`skills/`](./skills) directory contains one capability-oriented Skill per Ark CLI domain. Each Skill uses the standard `SKILL.md` and `references/` layout and is written in English for BytePlus users.

24

25The public Skill tree is derived from the Ark CLI source repository at a fixed commit. Product support is audited independently for BytePlus; the presence of a Skill documents the command surface and does not override the support status recorded by the product capability audit.

26

27## Community

28

29Scan the QR code to join the Ark CLI Lark user group for installation help, troubleshooting, bug reports, and usage discussions.

30

31Do not share API keys, access keys, tokens, or other credentials in the group. For reproducible bugs, please also open a GitHub issue so the fix can be tracked.