智能文档分析

• Outcome: Review
• Latest audit: Jul 30, 2026 · 3:52 PM UTC
• Version: 1.0.6

Overview

This skill is a coherent Baidu document-AI API wrapper, but users should treat uploaded documents and API credentials carefully.

Install only if you are comfortable sending selected documents to Baidu's cloud APIs. Avoid uploading confidential, regulated, or customer documents without approval, and protect Baidu API keys with restrictive file permissions and by keeping them out of source control, logs, and shared terminals.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (11)

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The quick-start shows multiple commands that upload local documents to Baidu cloud processing APIs, but it never warns users that files may contain sensitive or regulated data and will leave the local environment. In a document-analysis skill, users are especially likely to process contracts, IDs, invoices, or other confidential records, so omission of a privacy/data-transfer notice can lead to accidental exposure and compliance issues.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The credential setup section instructs users to place API keys and secret keys in a file or environment variables but gives no guidance on protecting those secrets. Without warnings about file permissions, avoiding source control, shell history, or secret rotation, users may mishandle credentials and expose access to the Baidu account and associated document-processing APIs.

Missing User Warnings

Medium

• Confidence: 91% confidence
• Finding: The skill processes user-supplied documents via Baidu's external API, but the description and safety text do not prominently and explicitly warn users that document contents are transmitted off-platform for third-party processing. This creates a meaningful privacy and compliance risk, especially for sensitive contracts, IDs, invoices, or internal business documents, because users may disclose confidential data without informed consent.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The guide repeatedly instructs users to upload local files, provide file URLs, and configure callback URLs, but it does not clearly warn that document contents will be transmitted to Baidu cloud services and potentially to user-specified external endpoints. This can lead to inadvertent exfiltration of sensitive documents or parsed results, especially in enterprise environments where users may assume processing is local because the CLI accepts local file paths and auto-converts them to Base64.

Missing User Warnings

Low

• Confidence: 88% confidence
• Finding: The credential setup section tells users to place API keys and secret keys in a plaintext config file or shell environment without warning about file permissions, shell history, source control leakage, or shared-host exposure. While this is common documentation, the omission increases the risk of accidental credential disclosure and downstream API abuse.

Missing User Warnings

Medium

• Confidence: 96% confidence
• Finding: The document instructs users to submit full contract files or remote file URLs to Baidu's external API but provides no warning that sensitive legal content will leave the local environment and be processed by a third party. In a contract-review context, uploaded documents commonly contain confidential business terms, personal data, and trade secrets, so omission of a privacy/transmission warning can lead to unintended data disclosure and compliance violations.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The documentation instructs users to send document content, including images and PDFs, to Baidu's remote API but does not warn that files leave the local environment or mention privacy, confidentiality, or compliance implications. In a document-analysis skill, users may submit contracts, IDs, or other sensitive files, so the lack of disclosure increases the risk of unintended sensitive data exfiltration to a third party.

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: The documentation encourages uploading full document content to a third-party API using either base64 payloads or remote URLs, but it does not warn about privacy, confidentiality, consent, retention, or data-transfer risks. In a skill specifically designed for document extraction, users are likely to process contracts, invoices, and other sensitive files, so omission of handling guidance can lead to unintended disclosure of regulated or confidential information.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The skill documentation explicitly instructs users to send full document contents to Baidu via file_data or file_url, but it does not warn that potentially sensitive files will leave the local environment and be processed by a third-party service. In a document-analysis skill, users are especially likely to submit contracts, IDs, financial records, or other confidential materials, so omission of a clear data-transmission warning can lead to unintended disclosure and compliance/privacy violations.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The documentation instructs users to submit document content via `file_data` or `file_url` to Baidu cloud API endpoints, but it does not clearly disclose that document contents and referenced URLs are transmitted to a third-party external service. In a document-analysis skill, users may process sensitive contracts, IDs, internal PDFs, or confidential records; without an explicit data-sharing warning, they may unknowingly exfiltrate sensitive information outside their trust boundary.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The client sends document contents and related metadata to Baidu-hosted external endpoints, but the code provides no built-in disclosure, consent gate, or indication that potentially sensitive files will leave the local environment. In a document-analysis skill, this creates a real privacy and compliance risk because users may submit contracts, IDs, or proprietary documents without understanding the third-party transfer.

VirusTotal

65/65 vendors flagged this skill as clean.

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical

• Code: suspicious.exposed_secret_literal
• Location: scripts/baidu_api_client.py:55