
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@byteplus/ark-cli
Advanced tools
BytePlus Ark CLI provides command-line access and Agent Skills for BytePlus Ark. This repository contains the public English Skills distributed with the CLI and the documentation required to use them from supported AI coding agents.
npm install -g @byteplus/ark-cli@latest
After installing the CLI, authenticate and install the bundled Skills into the supported local agents:
arkcli auth login
arkcli auth status
arkcli +connect
BytePlus CLI state is stored separately under ~/.arkcli-bp.
The skills/ directory contains one capability-oriented Skill per Ark CLI domain. Each Skill uses the standard SKILL.md and references/ layout and is written in English for BytePlus users.
The public Skill tree is derived from the Ark CLI source repository at a fixed commit. Product support is audited independently for BytePlus; the presence of a Skill documents the command surface and does not override the support status recorded by the product capability audit.
Scan the QR code to join the Ark CLI Lark user group for installation help, troubleshooting, bug reports, and usage discussions.
Do not share API keys, access keys, tokens, or other credentials in the group. For reproducible bugs, please also open a GitHub issue so the fix can be tracked.
Do not disclose security issues through a public GitHub issue or the user group. Report them through the official BytePlus support channel.
The public Skills and documentation are licensed under the Apache License 2.0.
FAQs
BytePlus Ark command-line interface
The npm package @byteplus/ark-cli receives a total of 1,521 weekly downloads. As such, @byteplus/ark-cli popularity was classified as popular.
We found that @byteplus/ark-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 29 open source maintainers collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.