百度网盘官方 skill

This skill is coherent with its stated purpose but exercises normal-install risks you should consider before installing: it downloads and executes an installer from Baidu's CDN and writes binaries/config to your user directories (~/.local/bin, ~/.config/bdpan) and uses /tmp for background download logs. Actions to consider before proceeding: - If you trust Baidu and expect to use a bdpan CLI, the behavior is reasonable; otherwise run install.sh manually in a sandboxed environment first. - The install/update scripts perform network downloads and (in the code) SHA256 checks — verify the checksums/URLs yourself if you need high assurance. Note: SKILL.md contains a contradictory statement saying install.sh does not check SHA256; the script actually contains checksums. Ask the maintainer to clarify. - Login is interactive (OOB) and the scripts try to avoid exposing the authorization code on the command line; follow the prompts and do not paste tokens into other channels. The skill forbids reading ~/.config/bdpan/config.json, but installing/uninstalling will create/remove that path — back up any important data before uninstalling. - Background downloads use nohup and write logs to /tmp; expect long-running processes and temporary files. - If you have sensitive data or are in a high-security environment, prefer manual inspection and sandboxed installation before granting this skill the ability to run install/update/login scripts.