kdocs
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes setup scripts (
scripts/setup.sh,scripts/setup.ps1,scripts/setup.cjs) that download thekdocs-clibinary from the official vendor CDN (wpsai.wpscdn.cn). These downloads are part of the intended installation process and are protected by SHA256 checksum verification to ensure the integrity of the downloaded executable. - [COMMAND_EXECUTION]: The skill operates by orchestrating the
kdocs-clitool to interact with Kingsoft Docs APIs. It includes specific instructions for the agent to execute shell commands for document manipulation, authentication, and version management, with clear error handling and confirmation prompts. - [SAFE]: Security is prioritized in the instructions, which explicitly forbid displaying authentication tokens in cleartext and require the agent to obtain user confirmation before executing any irreversible operations, such as deleting documents or closing knowledge bases.
- [SAFE]: Network communication is directed exclusively to official Kingsoft/WPS domains (
kdocs.cn,wps.cn), and credential management is delegated to the system keychain through the CLI, minimizing the risk of data exposure or exfiltration.
Audit Metadata