quarkclouddrive

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The install.sh script downloads the Quark Drive CLI and configuration from https://open-api-drive.quark.cn. This is a well-known service domain belonging to the vendor (Quark Drive), which is within the expected scope for an official integration skill.
  • [COMMAND_EXECUTION]: The skill uses node to execute a local script scripts/quark-drive.cjs for all drive operations. It also utilizes shell scripts scripts/install.sh and scripts/uninstall.sh for installation management. These behaviors are standard for CLI-based agent skills and perform intended functional tasks like file uploading, searching, and account management.
  • [DATA_EXPOSURE]: The skill manages file IDs (FIDs) and access tokens. The documentation correctly instructs the agent to store secrets in standard configuration paths and provides a clear logout and unauthorize mechanism for users to revoke access.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 04:11 AM
Security Audit — agent-trust-hub — quarkclouddrive