The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The install.sh and update.sh scripts fetch the bdpan CLI and skill updates from official Baidu domains (issuecdn.baidupcs.com and pan.baidu.com). These sources are vendor-owned and trusted.
[REMOTE_CODE_EXECUTION]: The installation process involves downloading and executing a platform-specific binary installer. This is secured via hardcoded SHA256 checksum verification within the script to ensure the binary has not been tampered with.
[DYNAMIC_EXECUTION]: Maintenance scripts such as memory-backup.sh utilize node -e to parse and manipulate JSON data. This is used as a standard utility for processing tool outputs and does not involve executing untrusted code.
[INDIRECT_PROMPT_INJECTION]: The skill processes external data including file contents and search snippets. It includes specific directives and safety constraints requiring the agent to treat this data as content only and never as instructions, mitigating potential prompt injection from stored files.

baidu-drive