soia-pkm-baidu-netdisk-ops

SUSPICIOUS. The core purpose is coherent for a Baidu Netdisk skill, but the trust model is expanded by transitive skill installation and by optional use of a community CLI that receives credentials. Official-mode behavior appears aligned, yet the overall footprint is higher risk than claimed because key auth and file actions are delegated to external scripts/binaries the skill does not itself verify.