百度文档解析pipeline-parser

• Analyzed: May 10, 2026, 6:49 AM
• Findings: 1
• Version: 1.0.5
• Hash: f5ff3e3ce0010d295d1590282990143ee88f1e5ecfd5ecf6601f30e12e23e99a
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate integration for the Baidu Document Analysis API, allowing users to parse various document formats (PDF, Word, etc.). The core logic in `scripts/baidu_doc_parser.py` correctly implements the asynchronous API flow (submit, poll, and fetch results) using official Baidu endpoints (aip.baidubce.com). No evidence of data exfiltration, malicious execution, or prompt injection was found; the script handles sensitive API keys via standard environment variables as documented in `SKILL.md` and `references/apikey-fetch.md`.