soia-pkm-baidu-netdisk-ops
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
bdpanandbaidupan-clibinaries via Python'ssubprocessmodule to manage cloud storage. It ensures security by usingshell=Falseand validating the binary against a hardcoded allowlist inscripts/baidupan_env.py.- [EXTERNAL_DOWNLOADS]: The skill references thebaidu-driveexternal dependency from thebaidu-netdiskGitHub organization and uses the officialbdpanCLI. These resources are associated with the service provider and are documented for user installation.- [DATA_EXFILTRATION]: The skill interacts with Baidu Netdisk APIs but includes specific safeguards to prevent the leakage of session tokens, device codes, and API secrets.scripts/baidupan_env.pymanages sensitive configuration locally and avoids printing secrets to logs or the agent interface.
Audit Metadata