baidu-wenku-aippt
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the
bdpanCLI installer and update packages from official Baidu domains (baidupcs.comandbaidu.com). All downloads are accompanied by integrity checks. - [REMOTE_CODE_EXECUTION]: Downloads and executes a binary installer (
bdpan-installer) for the CLI tool. This is a standard installation procedure for the vendor's tool, and the script enforces SHA256 checksum verification before execution to prevent tampering. - [COMMAND_EXECUTION]: Uses the
bdpanCLI to generate PPT files and manage the tool's lifecycle (install, login, update). Command arguments are handled using standard shell quoting to mitigate injection risks. - [SAFE]: Implements explicit safety constraints in the skill definition that forbid the agent from reading or outputting the content of
~/.config/bdpan/config.json, which contains sensitive authentication tokens. - [SAFE]: Employs an Out-of-Band (OOB) authentication flow where the user manually provides an authorization code, ensuring that the agent never handles the user's login credentials directly.
Audit Metadata