Skill Trust Decision
baidu-netdisk-skills-free
纯文档技能，无可执行代码，引用外部脚本缺失（可能是分发机制问题），API_KEY为占位符非真实凭证
Why this conclusion was reached
1/4 dimensions flagged Pass
Declared vs actual capability
Declared resources and inferred behavior are broadly aligned.
Block
Hidden execution and egress
1 high-risk artifacts or egress signals were extracted.
Pass
Attack chain and severe findings
There is no explicit malicious chain in the report.
Pass
Dependencies and supply chain hygiene
Dependencies are present but no obvious high-risk issue stands out.
What drove the risk score up
缺失引用脚本 +15
SKILL.md 引用 ${CLAUDE_SKILL_DIR}/scripts/install.sh 和 login.sh，但包内无 scripts/ 目录
文档-内容差异 +5
声明可执行操作但无实际代码，依赖外部 bdpan CLI 工具
API_KEY 占位符误报 +-5
预扫描标记的 API_KEY 是配置示例占位符，非真实凭证
Most important evidence
Medium Supply Chain
引用脚本缺失
SKILL.md 多次引用 scripts/install.sh 和 scripts/login.sh，但包内不存在 scripts/ 目录。实际安装和登录逻辑需从外部获取，存在供应链风险。
SKILL.md:47 验证脚本来源是否为官方可信渠道；考虑将关键脚本内嵌到包内或使用版本锁定的远程URL
Low Doc Mismatch
文档声明与实际内容不符
Skill 声明可执行上传、下载等操作，但包内无可执行代码，仅为文档。功能依赖外部 bdpan CLI 工具。
SKILL.md:1 明确说明实际执行依赖第三方 bdpan 工具，scripts/ 为外部依赖
Info Supply Chain
bdpan CLI 外部依赖
Skill 功能依赖未捆绑的 bdpan 命令行工具，该工具需单独安装，来源和安全性需用户自行评估。
SKILL.md:43 在文档中明确标注 bdpan 工具的官方获取渠道
Declared capability vs actual capability
Filesystem Pass
Declared READ
→ Inferred READ
SKILL.md: 文档声明仅在 /apps/bdpan/ 范围内操作 Shell Pass
Declared WRITE
→ Inferred WRITE
tools: [read, exec] — exec 映射为 Bash 执行 Network Pass
Declared NONE
→ Inferred NONE
SKILL.md 未声明直接网络访问，依赖 bdpan CLI 间接通信 Suspicious artifacts and egress
High API Key
API_KEY="your_api_key_here" SKILL.md:228
Medium External URL
https://clawhub.ai/user/thcjp skill-card.md:7
Medium External URL
https://clawhub.ai/thcjp/skills/baidu-netdisk-skills-free skill-card.md:29
Dependencies and supply chain
| Package | Version | Source | Known vuln | Notes |
|---|---|---|---|---|
| bdpan | unknown | external CLI | No | 未捆绑，需单独安装，来源需验证 |
File composition
2 files · 375 lines
Markdown 2 files · 375 lines
Files of concern · 2
SKILL.md 引用脚本缺失 · 文档声明与实际内容不符 · bdpan CLI 外部依赖 · API_KEY="your_api_key_here"
skill-card.md https://clawhub.ai/user/thcjp · https://clawhub.ai/thcjp/skills/baidu-netdisk-skills-free
Security positives
写操作需用户显式确认（y）后才执行
路径限制在 /apps/bdpan/ 范围内，防止误操作系统目录
禁止读取 ~/.config/bdpan/config.json 等敏感凭证配置
拒绝路径穿越（..、~）和越界绝对路径
无恶意代码或混淆内容
API_KEY 为占位符示例，非真实凭证