Security audit
Security checks across malware telemetry and agentic risk
The skill is a coherent Quark Drive helper, but it also installs and updates local executable code with broad system changes and handles cloud-drive credentials in ways that warrant Review before installation.
Install only if you trust the publisher and are comfortable granting this skill access to your Quark Drive account and local environment. Expect it to store local auth state, upload/download/share/move cloud files when instructed, cache search metadata briefly, and modify your shell environment. Be especially cautious with public share links, recursive folder uploads, and running the installer on machines that hold sensitive data.
`)}progress(e,t,r){let n=Number.isFinite(t)?t:0,i=Number.isFinite(r)?r:0,o=i>0?Math.round(n/i*100):0,a={msg:"\u8FDB\u884C\u4E2D",data:{current:n,total:i,percent:Number(o)},action:e,type:"progress"};this.flushResult(a)}spinner(e){return{stop(){},message(){}}}debug(e){this.verbose&&console.error(yt.default.dim(`[DEBUG] ${e}`))}flushResult(e){this.writeStdout(JSON.stringify(e))}writeStdout(e){process.stdout.write(e+`
`)}};K();V();var Ke=O(require("path")),Ou=O(require("os")),ut=O(require("fs")),Lm=!0,Yt=Lm?".quarkclouddrive":".quark-drive",ba="config.json",Uu=`${Yt}/storage.json`,Lu=`${Yt}/search-results`,Ii="./downloads";var Nu=Ke.join(Ou.homedir(),Yt);function Nm(){return Ke.join(Nu,ba)}function Mm(){return Ke.join(Ke.dirname(process.cwd()),Yt,ba)}function Fm(){return Ke.join(process.cwd(),Yt,ba)}function va(){let s=[Nm(),Mm(),Fm()];return[...new Set(s)]}var Mu="cli";function Fu(s){Mu=(s??"").trim().replace(/[^a-zA-Z0-9._-]/g,"_")||"cli"}function $u(){return Mu}var $m="qrcode";function qu(){return Ke.join(Nu,$m)}function Hu(){let s=qu();if(ut.existsSync(s))for(let e of ut.readdirSync(s))try{ut.rmSync(Ke.join(s,e),{recursive:!0,force:!0})}catch{}}function zu(){let s=qu();return ut.existsSync(s)||ut.mkdirSync(s,{recursive:!0}),Ke.join(s,"unauthorize-qr.png")}function An(s=new Date){let e=(i,o=2)=>String(i).padStart(o,"0"),t=-s.getTimezoneOffset(),r=t>=0?"+":"-",n=Math.abs(t);return`${s.getFullYear()}-${e(s.getMonth()+1)}-${e(s.getDate())} ${e(s.getHours())}:${e(s.getMinutes())}:${e(s.getSeconds())}.${e(s.getMilliseconds(),3)} ${r}${e(Math.floor(n/60))}:${e(n%60)}`}function wn(s){let e=/[?&]req_id=([^&]+)/.exec(s);return e?decodeURIComponent(e[1]):""}function Pr(s){return s?s.length<=12?s:`${s.slice(0,12)}\u2026`:""}var B=class extends Error{constructor(e,t,r,n=1,i={}){super(r),this.name="CliExitError",this.exitCode=n,this.action=e,this.errorCode=t,this.errorMsg=r,this.data=i}},Ci=class{constructor(e){this.verbose=e.verbose,this.output=new ws(this.verbose)}finish(e,t={}
...[truncated 27 chars]`)}progress(e,t,r){let n=Number.isFinite(t)?t:0,i=Number.isFinite(r)?r:0,o=i>0?Math.round(n/i*100):0,a={msg:"\u8FDB\u884C\u4E2D",data:{current:n,total:i,percent:Number(o)},action:e,type:"progress"};this.flushResult(a)}spinner(e){return{stop(){},message(){}}}debug(e){this.verbose&&console.error(yt.default.dim(`[DEBUG] ${e}`))}flushResult(e){this.writeStdout(JSON.stringify(e))}writeStdout(e){process.stdout.write(e+`
`)}};K();V();var Ke=O(require("path")),Ou=O(require("os")),ut=O(require("fs")),Lm=!0,Yt=Lm?".quarkclouddrive":".quark-drive",ba="config.json",Uu=`${Yt}/storage.json`,Lu=`${Yt}/search-results`,Ii="./downloads";var Nu=Ke.join(Ou.homedir(),Yt);function Nm(){return Ke.join(Nu,ba)}function Mm(){return Ke.join(Ke.dirname(process.cwd()),Yt,ba)}function Fm(){return Ke.join(process.cwd(),Yt,ba)}function va(){let s=[Nm(),Mm(),Fm()];return[...new Set(s)]}var Mu="cli";function Fu(s){Mu=(s??"").trim().replace(/[^a-zA-Z0-9._-]/g,"_")||"cli"}function $u(){return Mu}var $m="qrcode";function qu(){return Ke.join(Nu,$m)}function Hu(){let s=qu();if(ut.existsSync(s))for(let e of ut.readdirSync(s))try{ut.rmSync(Ke.join(s,e),{recursive:!0,force:!0})}catch{}}function zu(){let s=qu();return ut.existsSync(s)||ut.mkdirSync(s,{recursive:!0}),Ke.join(s,"unauthorize-qr.png")}function An(s=new Date){let e=(i,o=2)=>String(i).padStart(o,"0"),t=-s.getTimezoneOffset(),r=t>=0?"+":"-",n=Math.abs(t);return`${s.getFullYear()}-${e(s.getMonth()+1)}-${e(s.getDate())} ${e(s.getHours())}:${e(s.getMinutes())}:${e(s.getSeconds())}.${e(s.getMilliseconds(),3)} ${r}${e(Math.floor(n/60))}:${e(n%60)}`}function wn(s){let e=/[?&]req_id=([^&]+)/.exec(s);return e?decodeURIComponent(e[1]):""}function Pr(s){return s?s.length<=12?s:`${s.slice(0,12)}\u2026`:""}var B=class extends Error{constructor(e,t,r,n=1,i={}){super(r),this.name="CliExitError",this.exitCode=n,this.action=e,this.errorCode=t,this.errorMsg=r,this.data=i}},Ci=class{constructor(e){this.verbose=e.verbose,this.output=new ws(this.verbose)}finish(e,t={}
...[truncated 27 chars]`).join(`
# `)}`}let l=a||wn(e),d=l?` req_id=${l}`:"",u=["",`# [${i}] Response ${t??"-"}${d} ${s} ${e}`,o,""].filter(c=>c!=="").join(`
`);Dr.default.appendFileSync(Zt,u+`
`,"utf8")}catch{}}var d_=new Set([11001,11017,12003,12004]),u_=new Set([11e3]),c_=new Set(["EPIPE","ECONNRESET","ECONNREFUSED","ETIMEDOUT","EHOSTUNREACH"]),vc=1;function p_(s){if(!s||typeof s!="object"||Array.isArray(s))return!1;let e=s;return typeof e.accessToken=="string"&&(e.clientToken===void 0||typeof e.clientToken=="string")&&typeof e.userId=="string"}function Ui(s){return s<1024?`${s}B`:s<1024*1024?`${(s/1024).toFixed(1)}KB`:s<1024*1024*1024?`${(s/1024/1024).toFixed(2)}MB`:`${(s/1024/1024/1024).toFixed(2)}GB`}var vn=class{constructor(e){this.type="network";this.abortControllers=new Map;this.retryMap=new Map;this.socketRetryMap=new Map;this.debug=e?.debug??!1;let t=void 0;if(this.proxyDetected=!!t,t&&(this.proxyUrl=new URL(t)),this.proxyDetected&&this.proxyUrl){let r=this.proxyUrl.hostname,n=parseInt(this.proxyUrl.port||"8888",10);this.httpAgent=new bn.default.Agent({keepAlive:!0}),this.httpsAgent=new xi(r,n),this.log(`Proxy detected: ${this.proxyUrl.href}, HTTPS requests will tunnel through proxy`)}else this.httpAgent=new bn.default.Agent({keepAlive:!0}),this.httpsAgent=new Li.default.Agent({keepAlive:!0});this.setCurlLogFile(e?.curlLogFile)}setCurlLogFile(e){e?Cc(e):Ec()}log(e){this.debug&&console.debug(`[NodeNetworkAdapter] ${e}`)}interceptPanServerRequest(e,t){let r=new URL(e),n=r.pathname,i=lu[n];if(!i)return{url:e,intercepted:!1};if(this.log(`Pan server intercept: ${n} \u2192 ${i.panPath}`),r.hostname=du(i),r.port="",r.pathname=i.panPath,i.panQuery){let a=new URLSearchParams(i.panQuery);for(let[l,d]of a)r.searchParams.set(l,d)}for(let a of au)delete t[a];let o=r.toString();return this.log(`Pan server intercepted URL: ${o}`),{url:o,intercepted:!0}}convertPanResponseToApiResponse(e){if(typeof e!="object"||e===null)return e;let t=e;if(typeof t.status=="number"&&t.status>=100&&"code"in t)
...[truncated 28 chars]`).join(`
# `)}`}let l=a||wn(e),d=l?` req_id=${l}`:"",u=["",`# [${i}] Response ${t??"-"}${d} ${s} ${e}`,o,""].filter(c=>c!=="").join(`
`);Dr.default.appendFileSync(Zt,u+`
`,"utf8")}catch{}}var d_=new Set([11001,11017,12003,12004]),u_=new Set([11e3]),c_=new Set(["EPIPE","ECONNRESET","ECONNREFUSED","ETIMEDOUT","EHOSTUNREACH"]),vc=1;function p_(s){if(!s||typeof s!="object"||Array.isArray(s))return!1;let e=s;return typeof e.accessToken=="string"&&(e.clientToken===void 0||typeof e.clientToken=="string")&&typeof e.userId=="string"}function Ui(s){return s<1024?`${s}B`:s<1024*1024?`${(s/1024).toFixed(1)}KB`:s<1024*1024*1024?`${(s/1024/1024).toFixed(2)}MB`:`${(s/1024/1024/1024).toFixed(2)}GB`}var vn=class{constructor(e){this.type="network";this.abortControllers=new Map;this.retryMap=new Map;this.socketRetryMap=new Map;this.debug=e?.debug??!1;let t=void 0;if(this.proxyDetected=!!t,t&&(this.proxyUrl=new URL(t)),this.proxyDetected&&this.proxyUrl){let r=this.proxyUrl.hostname,n=parseInt(this.proxyUrl.port||"8888",10);this.httpAgent=new bn.default.Agent({keepAlive:!0}),this.httpsAgent=new xi(r,n),this.log(`Proxy detected: ${this.proxyUrl.href}, HTTPS requests will tunnel through proxy`)}else this.httpAgent=new bn.default.Agent({keepAlive:!0}),this.httpsAgent=new Li.default.Agent({keepAlive:!0});this.setCurlLogFile(e?.curlLogFile)}setCurlLogFile(e){e?Cc(e):Ec()}log(e){this.debug&&console.debug(`[NodeNetworkAdapter] ${e}`)}interceptPanServerRequest(e,t){let r=new URL(e),n=r.pathname,i=lu[n];if(!i)return{url:e,intercepted:!1};if(this.log(`Pan server intercept: ${n} \u2192 ${i.panPath}`),r.hostname=du(i),r.port="",r.pathname=i.panPath,i.panQuery){let a=new URLSearchParams(i.panQuery);for(let[l,d]of a)r.searchParams.set(l,d)}for(let a of au)delete t[a];let o=r.toString();return this.log(`Pan server intercepted URL: ${o}`),{url:o,intercepted:!0}}convertPanResponseToApiResponse(e){if(typeof e!="object"||e===null)return e;let t=e;if(typeof t.status=="number"&&t.status>=100&&"code"in t)
...[truncated 28 chars]VirusTotal findings are pending for this skill version.
No suspicious patterns detected.