baidu-cloud-bos

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt explicitly asks the user to provide AccessKeyId/SecretAccessKey/StsToken and shows commands that embed those secrets verbatim (e.g., --sk "" and bcecmd configure --secret-key ), which requires the LLM to handle/output secret values directly.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The setup script runs npm install @baiducloud/sdk (fetching code from the npm registry, e.g. https://www.npmjs.com/package/@baiducloud/sdk) and the skill's Node.js script requires and executes that package at runtime, so remote code is fetched and executed as a required dependency.