baidu-drive
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
bdpanCLI installer and updates from official Baidu domains (issuecdn.baidupcs.comandpan.baidu.com). These downloads are verified using SHA256 checksums to ensure file integrity before execution or extraction. - [COMMAND_EXECUTION]: Executes the
bdpanCLI tool for file operations and utilizes auxiliary bash scripts for installation, authentication, and backup tasks. It also usesnode -eto process JSON metadata during backup operations. - [DATA_EXPOSURE]: Accesses specific agent workspace and configuration directories (such as
~/.openclaw,~/.kimi, and~/.maxclaw) to perform memory backup and restoration. This access is limited to the skill's declared memory management functionality. - [SAFE]: Implements multiple security safeguards, including strict prohibitions on reading authentication tokens from
config.json, mandatory user confirmation for high-risk operations (e.g., file deletion), and internal path validation checks to prevent directory traversal attacks.
Audit Metadata