baidu-drive

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the bdpan CLI installer and updates from official Baidu domains (issuecdn.baidupcs.com and pan.baidu.com). These downloads are verified using SHA256 checksums to ensure file integrity before execution or extraction.
  • [COMMAND_EXECUTION]: Executes the bdpan CLI tool for file operations and utilizes auxiliary bash scripts for installation, authentication, and backup tasks. It also uses node -e to process JSON metadata during backup operations.
  • [DATA_EXPOSURE]: Accesses specific agent workspace and configuration directories (such as ~/.openclaw, ~/.kimi, and ~/.maxclaw) to perform memory backup and restoration. This access is limited to the skill's declared memory management functionality.
  • [SAFE]: Implements multiple security safeguards, including strict prohibitions on reading authentication tokens from config.json, mandatory user confirmation for high-risk operations (e.g., file deletion), and internal path validation checks to prevent directory traversal attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 02:42 AM