quarkclouddrive
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
install.shscript downloads the Quark Drive CLI and configuration fromhttps://open-api-drive.quark.cn. This is a well-known service domain belonging to the vendor (Quark Drive), which is within the expected scope for an official integration skill. - [COMMAND_EXECUTION]: The skill uses
nodeto execute a local scriptscripts/quark-drive.cjsfor all drive operations. It also utilizes shell scriptsscripts/install.shandscripts/uninstall.shfor installation management. These behaviors are standard for CLI-based agent skills and perform intended functional tasks like file uploading, searching, and account management. - [DATA_EXPOSURE]: The skill manages file IDs (FIDs) and access tokens. The documentation correctly instructs the agent to store secrets in standard configuration paths and provides a clear
logoutandunauthorizemechanism for users to revoke access.
Audit Metadata