baidunetdisk-upload

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The script executes local Python logic to resolve file paths, create temporary staging directories, and interact with the local Baidu Netdisk client application.
  • [DYNAMIC_EXECUTION]: The script dynamically modifies the Python search path (sys.path) to import backend utilities from a local directory (/home/ivan/github/CLI-Anything/baidunetdisk/agent-harness), which is a form of dynamic loading from a computed path.
  • [EXTERNAL_DOWNLOADS]: The skill's primary function is to facilitate the transfer of local files to Baidu Netdisk cloud storage, which involves network communication with the service providers.
  • [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by processing user-provided file names and paths as search queries.
  • Ingestion points: User-provided search queries and file paths passed as CLI arguments to the upload script.
  • Boundary markers: Absent; the skill does not use specific delimiters or instructions to prevent the backend from interpreting malicious file names as commands.
  • Capability inventory: File system access (read/write in staging area), dynamic module loading, and network transmission (via the external harness).
  • Sanitization: Basic normalization is performed on the remote folder name, but search queries are passed directly to the local path resolver.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 11:33 AM