管理和操作百度网盘文件，实现文件列出、搜索及目录创建功能，需配置AppID和access_token。

This skill appears to implement exactly what it claims (Baidu Netdisk list/search/mkdir) and only calls pan.baidu.com, but be cautious because the package metadata does not declare the required environment variables. Before installing: (1) verify the source/owner since no homepage is provided; (2) only provide a Baidu access_token with minimal scope and expire/remove it when not needed; (3) set credentials in a secure environment (not shared/system-wide); (4) review the included scripts yourself — they are short and readable — and run in a sandbox if you are unsure; (5) ensure the runtime has python3 and the 'requests' package available. The mismatch between metadata and the README is suspicious packaging hygiene; if you need higher assurance, ask the publisher to update metadata to declare BAIDU_APP_ID and BAIDU_NETDISK_TOKEN explicitly and to provide a verified homepage or repository.

Type: OpenClaw Skill Name: baidu-netdisk-eva Version: 1.0.0 The skill bundle provides legitimate functionality for managing Baidu Netdisk files, including listing, searching, and creating directories via the official Baidu REST API. The Python script (scripts/main.py) correctly handles authentication using environment variables and contains no evidence of data exfiltration, malicious execution, or prompt injection. All actions are transparent and align with the documentation provided in SKILL.md.