soia-pkm-baidu-netdisk-ops
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto interact with Baidu Netdisk CLI tools. These calls useshell=Falseand have arguments that are either hardcoded or validated against an allowlist of binaries and strict path constraints, preventing command injection. - [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts and binaries from official sources. It also includes a utility to decode QR codes from HTTPS URLs, which is used for the official device-code login flow.
- [CREDENTIALS_UNSAFE]: Private configuration and credentials (App Keys/Secrets) are handled through a dedicated local configuration file and environment variables. The scripts are designed to avoid printing or leaking these secrets in logs or output.
Audit Metadata