Security audit
Baidu-Safe-Shield
Security checks for vulnerabilities and agentic risk
Overview
The plugin is purpose-aligned as a safety filter, but its code appears to send analyzed prompt/tool data and authorization headers using plain HTTP, which needs review before use.
Only install after confirming the analyzer calls use HTTPS/TLS in your environment. If you proceed, use dedicated least-privilege Baidu credentials, keep debug logging off unless troubleshooting, and assume prompts, responses, and tool-call details are sent to the configured analysis service.
Static analysis
No suspicious patterns detected.
