bdpan-storage 安全扫描报告 — 可信 | ClawSafe

8 /100

bdpan-storage

百度网盘文件管理 - Baidu Netdisk file management for upload, download, transfer, share, search, and other operations

Well-secured Baidu Netdisk management skill with comprehensive safety constraints, SHA256 verification, and multi-step confirmation flows.

技能名称bdpan-storage

分析耗时37.9s

引擎pi

✓

可以安装

This skill is safe to use. The declared capabilities match actual implementation. Continue following the documented security constraints.

安全发现 4 项

严重性	安全发现	位置
低危	Multi-step confirmation for downloads All download and execution flows implement two-step confirmation, which is a positive security pattern `read -p '是否立即执行安装? [y/N]'` → No action needed - this is a security strength	`scripts/install.sh:186`
低危	SHA256 verification before execution Installers and update packages are verified with SHA256 before execution, protecting against tampering `if [ "$actual_checksum" != "$expected_checksum" ]; then` → No action needed - this is a security strength	`scripts/install.sh:147`
提示	Credential handling via stdin Auth codes are passed via stdin to prevent exposure in process listings `echo "$AUTH_CODE" \| bdpan login --set-code-stdin` → No action needed - this is a security strength	`scripts/login.sh:137`
提示	Agent environment detection in update script Update script detects Agent environment and forces user confirmation even with --yes flag `if [ -n "$CLAUDE_CODE" ] \|\| [ -n "$ANTHROPIC_API_KEY" ]` → No action needed - this is a security strength	`scripts/update.sh:206`

资源类型	声明权限	推断权限	状态	证据
文件系统	`WRITE`	`WRITE`	✓ 一致	Bash tool for install/update/uninstall scripts
网络访问	`READ`	`READ`	✓ 一致	curl/wget used only for Baidu CDN downloads
命令执行	`WRITE`	`WRITE`	✓ 一致	Subprocess in install.sh, update.sh, login.sh, uninstall.sh
环境变量	`NONE`	`NONE`	—	SKILL.md explicitly prohibits setting BDPAN_CONFIG_PATH, BDPAN_BIN, etc.
技能调用	`READ`	`READ`	✓ 一致	Allowed-tools includes Glob, Grep for internal operations

10 项发现

🔗

中危外部 URL 外部 URL

https://pan.baidu.com/s/1xxxxx?pwd=abcd

SKILL.md:99

🔗

中危外部 URL 外部 URL

https://pan.baidu.com/s/1xxxxx

SKILL.md:100

🔗

中危外部 URL 外部 URL

https://pan.baidu.com/s/1

reference/bdpan-commands.md:128

🔗

中危外部 URL 外部 URL

https://pan.baidu.com/s/1xxxxxxx

reference/bdpan-commands.md:230

🔗

中危外部 URL 外部 URL

https://openapi.baidu.com/oauth/2.0/authorize?...

reference/examples.md:167

🔗

中危外部 URL 外部 URL

https://openapi.baidu.com/oauth/...?device_code=xxxxx

reference/troubleshooting.md:34

🔗

中危外部 URL 外部 URL

https://openapi.baidu.com/oauth/2.0/authorize?response_type=device_code&client_id=...&device_code=xxxxx

reference/troubleshooting.md:48

🔗

中危外部 URL 外部 URL

https://issuecdn.baidupcs.com/issue/netdisk/ai-bdpan/installer/$

scripts/install.sh:9

🔗

中危外部 URL 外部 URL

https://pan.baidu.com/act/v2/api/conf?conf_key=bd_skills

scripts/update.sh:15

📧

提示邮箱邮箱地址

[email protected]

reference/examples.md:176

目录结构

10 文件 · 72.5 KB · 2716 行

Markdown 6f · 1709L Shell 4f · 1007L

├─ ▾ 📁 reference

│ ├─ 📝 authentication.md Markdown 117L · 2.3 KB

│ ├─ 📝 bdpan-commands.md Markdown 661L · 14.6 KB

│ ├─ 📝 examples.md Markdown 356L · 7.6 KB

│ ├─ 📝 notes.md Markdown 26L · 1.0 KB

│ └─ 📝 troubleshooting.md Markdown 349L · 6.9 KB

├─ ▾ 📁 scripts

│ ├─ 🔧 install.sh Shell 304L · 11.4 KB

│ ├─ 🔧 login.sh Shell 185L · 7.1 KB

│ ├─ 🔧 uninstall.sh Shell 155L · 4.2 KB

│ └─ 🔧 update.sh Shell 363L · 10.0 KB

└─ 📝 SKILL.md Markdown 200L · 7.5 KB

依赖分析 2 项

包名	版本	来源	已知漏洞	备注
`bdpan CLI`	`3.7.3`	Baidu CDN	否	Pinned version with SHA256 verification
`unzip`	`any`	system	否	Standard tool, no external dependencies

安全亮点

✓ Comprehensive security constraints documented in SKILL.md with path restrictions (only /apps/bdpan/)

✓ Agent explicitly prohibited from setting environment variables (BDPAN_CONFIG_PATH, BDPAN_BIN, etc.)

✓ Login must use login.sh script - direct bdpan login prohibited

✓ Config.json content (access_token) explicitly protected from reading/output

✓ All external downloads use SHA256 verification before execution

✓ Two-step confirmation for all installation and update operations

✓ Auth codes passed via stdin to prevent ps/cmdline exposure

✓ Update script requires explicit user trigger, prohibits automatic updates

✓ Strong trigger rules requiring both Baidu Netdisk mention AND clear operation intent

✓ High-risk operations (rm, upload/download conflict) require mandatory user confirmation

✓ Security disclaimers displayed with safety warnings for public environment use

✓ Version pinning in install.sh (v3.7.3) with hardcoded checksums for each platform