Back to plugin

Security audit

Baidu-Safe-Shield

Security checks for vulnerabilities and agentic risk

Overview

The plugin is purpose-aligned as a safety filter, but its code appears to send analyzed prompt/tool data and authorization headers using plain HTTP, which needs review before use.

Only install after confirming the analyzer calls use HTTPS/TLS in your environment. If you proceed, use dedicated least-privilege Baidu credentials, keep debug logging off unless troubleshooting, and assume prompts, responses, and tool-call details are sent to the configured analysis service.

Static analysis

No suspicious patterns detected.