Security audit
Security checks for vulnerabilities and agentic risk
This skill coherently provides Baidu Netdisk list, search, and directory-creation commands using user-supplied OAuth credentials, with no evidence of hidden persistence, exfiltration, or destructive behavior.
Install this only if you intend to let the skill access your Baidu Netdisk account using your OAuth token. Treat list and search results as private metadata, and confirm mkdir requests yourself because they create remote directories in the account.
The skill description says it manages Baidu Netdisk files but does not clearly warn users that it will access their cloud account and perform remote operations such as listing, searching, or creating directories. This lack of transparent disclosure increases the risk of users authorizing or invoking account-affecting actions without understanding the data-access scope or consequences.
The trigger conditions include broad everyday terms like '网盘' and generic file-management phrases, which can cause the skill to activate in contexts the user did not intend. Because this skill performs remote cloud-drive operations, accidental invocation could expose file listings or initiate management actions against a real Baidu Netdisk account.
The create_dir function performs a write operation against the Baidu Netdisk API, which changes user data by creating a directory. Although the command name implies creation, there is no confirmation prompt, explicit warning, or user-facing disclosure beyond the success message after the action has already occurred.
The module description, help text, and user-facing messages are consistently presented in Chinese, which imposes a specific language on users. There is no indication that the skill is region-specific or that users can opt into another language.
The manifest presents all user-facing descriptions and keywords in Chinese, with no indication that language selection is optional or that the skill is intentionally limited to Chinese-speaking users. This can violate language or locale policy when a skill appears to enforce a specific language without opt-in or documented justification.
This manifest defines commands like listing, searching, and creating directories, but it does not specify any trigger scope, exclusion conditions, or negative examples. In a manifest file, such broad command descriptions can make invocation conditions ambiguous, especially for common actions like 'list' or 'search'.
No suspicious patterns detected.
