soia-pkm-baidu-netdisk-ops

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The list is mostly official Baidu and project GitHub pages (low risk), but it includes a third‑party personal GitHub repo and its Releases page (mqhe2007/baidupan-cli) that distributes executables from an individual account, which is a higher-risk download source.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL 的只读 JSONL 扫描在 scripts/scan_drive.py 里调用本地 CLI bdpan/baidupan-cli 的 ls --json，并解析其返回的条目字段来递归列目录；外部用户并不能通过“先选具体 item”之外的方式向该运行时注入可读自由文本内容（只是他们选择扫描的虚拟路径参数，且输出被当作结构化 JSON 处理）。

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs runtime installation of upstream code from GitHub (e.g., https://github.com/baidu-netdisk/bdpan-storage/skills) which pulls and runs the upstream install scripts (that download/execute binaries from Baidu CDN), and it also points to community builds/releases (https://github.com/mqhe2007/baidupan-cli and https://github.com/mqhe2007/baidupan-cli/releases) used at install time—these external fetches execute remote code and are required for the skill to function.