baidu-drive

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required workflow involves interacting with Baidu Drive files, which can include downloading or reading files containing outsider-authored free text (such as documents or text files stored in the cloud drive) that are subsequently ingested by the agent.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (medium risk: 0.30). The skill manages Baidu Drive files, queries capacity, and includes a membership management feature (bdpan vip --json) which provides cashier links (mobile and desktop checkout URLs) when users express payment or upgrade intent. This constitutes an indirect financial operation (generating/retrieving bills or checkout instructions for downstream handling). Since it is an indirect operation, direct operation control testing does not apply.