baidunetdisk-upload
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script executes local Python logic to resolve file paths, create temporary staging directories, and interact with the local Baidu Netdisk client application.
- [DYNAMIC_EXECUTION]: The script dynamically modifies the Python search path (
sys.path) to import backend utilities from a local directory (/home/ivan/github/CLI-Anything/baidunetdisk/agent-harness), which is a form of dynamic loading from a computed path. - [EXTERNAL_DOWNLOADS]: The skill's primary function is to facilitate the transfer of local files to Baidu Netdisk cloud storage, which involves network communication with the service providers.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface by processing user-provided file names and paths as search queries.
- Ingestion points: User-provided search queries and file paths passed as CLI arguments to the upload script.
- Boundary markers: Absent; the skill does not use specific delimiters or instructions to prevent the backend from interpreting malicious file names as commands.
- Capability inventory: File system access (read/write in staging area), dynamic module loading, and network transmission (via the external harness).
- Sanitization: Basic normalization is performed on the remote folder name, but search queries are passed directly to the local path resolver.
Audit Metadata