baidu-drive
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on several shell scripts (install.sh, login.sh, update.sh, and memory-backup.sh) to manage the bdpan CLI tool and automate memory synchronization. These scripts are invoked via the Bash tool.
- [EXTERNAL_DOWNLOADS]: The skill downloads the bdpan CLI installer and skill updates from Baidu's official infrastructure (issuecdn.baidupcs.com and pan.baidu.com). These downloads are performed using curl or wget and are essential for the skill's functionality.
- [REMOTE_CODE_EXECUTION]: The installation and update mechanisms involve executing downloaded binary installers and unzipping update packages. These processes include mandatory SHA256 checksum verification to ensure the integrity of the downloaded code before execution.
Audit Metadata