Baidu Disk Manager
v2.0.0管理百度网盘文件，支持登录、列出文件、上传/下载/复制/移动/删除/重命名/创建文件夹、查看配额等操作。
⭐ 1· 160·0 current·0 all-time
byhayden.wang@power-hayden
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (Baidu Netdisk file management) matches the instructions: all runtime actions are calls to a local CLI (./scripts/go-bdisk) performing list/upload/download/rename/move/delete and info queries. Requiring a CLI binary is appropriate for this purpose.
Instruction Scope
SKILL.md confines runtime behavior to invoking the go-bdisk CLI and interacting with the user for confirmations. It explicitly requires user consent for login and destructive operations and references only local file paths and the CLI outputs (JSON). It does not instruct reading unrelated system files or exfiltrating data.
Install Mechanism
This is an instruction-only skill with no install spec and no included binaries or code files. It requires a local binary at ./scripts/go-bdisk but does not provide or document how to obtain/verify it — this is operationally reasonable but raises a verification step: you must supply/trust the binary yourself.
Credentials
The skill declares no required environment variables or credentials. Login uses app-key/secret-key but SKILL.md requires the user to run login manually; it does not request or store credentials itself, so requested environment access is proportional.
Persistence & Privilege
always is false and the skill does not ask to modify other skills or system-wide settings. Autonomous invocation is allowed (platform default) but not combined with any broad privileges here.
Assessment
Before installing or using: (1) ensure a trusted copy of the ./scripts/go-bdisk binary is present — the skill does not include or install it, so obtain it from a verified source and inspect it if possible; (2) be aware the skill will execute that local binary and access local files you ask it to upload/download; (3) the skill asks you to supply Baidu app-key/secret when logging in — do not share those credentials with untrusted parties; (4) confirm destructive operations when prompted; and (5) note the package has no homepage/source listed and the registry owner ID in _meta.json differs from the registry metadata shown, so double-check provenance if you require a higher assurance level.Like a lobster shell, security has layers — review code before you run it.
latestvk9764t58mm59mtqzrsw1f7ew5583h2yj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
💾 Clawdis
Bins./scripts/go-bdisk