soia-pkm-baidu-netdisk-ops
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the
bdpanandbaidupan-clibinaries using thesubprocessmodule. These calls are performed withshell=Falseand validate the binary name against a strict whitelist, effectively mitigating command injection risks. - [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of dependencies from well-known and official sources, such as the Baidu Netdisk GitHub organization. It also includes a utility for decoding QR codes from HTTPS URLs, which is used during the authenticated login workflow.
- [PROMPT_INJECTION]: A path normalization utility is implemented in the scanning scripts to reject directory traversal attempts (
..) or unauthorized home directory access (~), ensuring file operations remain within the intended virtual boundaries. - [CREDENTIALS_UNSAFE]: API keys and application secrets are managed using a dedicated local configuration file (
config.yml) located in the user's home directory. This approach follows security best practices by avoiding hardcoded secrets and keeping credentials out of the skill's source code and chat history.
Audit Metadata