Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/baidu-netdisk/bdpan-storagenpx agentmods add skills/baidu-netdisk/bdpan-storage/baidu-driveWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/baidu-netdisk/bdpan-storage/baidu-drive)<a href="https://agentmods.dev/skills/baidu-netdisk/bdpan-storage/baidu-drive"><img src="https://agentmods.dev/badge/skills/baidu-netdisk/bdpan-storage/baidu-drive/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/baidu-netdisk/bdpan-storage/baidu-drive"><img src="https://agentmods.dev/badge/skills/baidu-netdisk/bdpan-storage/baidu-drive.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk fail
- NVIDIA SkillSpector warn
SkillSpector: 3 findings, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Tool Misuse · line 214 Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns).Fix: Validate all tool parameters against an allowlist. Reject dangerous parameter values (shell=True, --force, -rf /) and use safe defaults.
- medium Rogue Agent · line 202 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
- medium Rogue Agent · line 203 Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.Fix: Remove any persistence mechanisms (cron jobs, startup scripts, state files). Skills should not maintain state across sessions without explicit user consent.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00174 | $0.09364 |
| Opus 5 | $0.00087 | $0.04682 |
| Sonnet 5 | $0.00035 | $0.01873 |
| Haiku 4.5 | $0.00017 | $0.00936 |
Grade A, and why
baidu-drive scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 508 lines — stays where its author put it; the contents beside it link to each section on GitHub.
百度网盘存储 Skill
百度网盘文件管理工具,所有操作限制在 /apps/bdpan/ 目录内。适配 Claude Code、DuClaw、OpenClaw 等。
使用注意事项详见 reference/notes.md
触发规则
网盘文件操作触发
同时满足以下条件才执行:
- 用户明确提及"百度网盘"、"bdpan"、"网盘"
- 操作意图明确(上传/下载/转存/分享/查看/搜索/移动/复制/重命名/创建文件夹/删除/登录/注销)
未通过触发规则时,禁止执行任何 bdpan 命令。
上下文延续: 当前对话已在进行网盘操作时,后续消息无需再次提及"网盘"即可触发。
所有命令公共参数(Agent 必传)
--agentname、--session-input 和 --session-id 是所有 bdpan CLI 子命令的公共命令参数,必须附加在具体命令调用中使用,不是独立命令。需要生成文件回端链接时,还要透传 Agent 上下文参数 --uid 和 --traceid。
bdpan <command> [命令参数] --agentname "<Agent 名称>" --session-input '<本轮用户原始输入>' --session-id "<当前会话 ID>" [--uid "<Agent 上下文 UID>" --traceid "<Agent 上下文 Trace ID>"]
例如:
bdpan search "<query>" --json --agentname "claude-code" --session-input "用户要找的文件" --session-id "1784035443-a1b2c3" --uid "<宿主注入的 uid>" --traceid "<宿主注入的 traceid>"
--agentname
- 作用:传入当前 Agent/宿主名称,仅用于服务质量追踪与来源识别,不参与命令的业务逻辑或结果处理。
- Agent 行为约束(必须遵守):Agent 在调用任何
bdpanCLI 子命令时,必须传入--agentname参数,值为当前调起运行环境或 Agent 框架的名称。此为 Agent 行为要求,不影响 CLI 执行逻辑。 - 兜底容错:仅当 Agent 确实无法获取环境名称时,可省略此参数,CLI 不会因缺少该参数而报错或影响命令执行。
--session-input
- 作用:传入用户的原始提问文本,仅用于服务质量追踪,不参与命令的业务逻辑或结果处理。
- Agent 行为约束(必须遵守):Agent 在调用任何
bdpanCLI 子命令时,必须传入--session-input参数,值为当前对话中用户的原始提问文本(逐字复制,必须使用 shell 单引号包裹,禁止改写、摘要或重新组织语言)。此为 Agent 行为要求,不影响 CLI 执行逻辑。 - 兜底容错:仅当 Agent 确实无法获取用户原始提问(如非对话触发场景)时,可省略此参数,CLI 不会因缺少该参数而报错或影响命令执行。
--session-id
- 作用:传入会话唯一标识,仅用于服务质量追踪,不参与命令的业务逻辑或结果处理。
- Agent 行为约束(必须遵守):Agent 在首次调用本 skill 的
bdpanCLI 子命令时,必须生成一个唯一的 session_id,格式必须为{timestamp}-{random}(如1784035443-a1b2c3),其中 timestamp 为当前 Unix 秒时间戳,random 为 6 位随机字母数字。禁止使用语义化名称(如 dog001、mom001、test001 等)。并在同一对话的后续所有 CLI 子命令调用中传入同一个 session_id。 - 生成时机:在对话中第一次需要调用
bdpanCLI 子命令时生成,后续复用。 - 兜底容错:CLI 不会因缺少该参数而报错或影响命令执行。
--uid / --traceid(回端上下文)
- 作用:为文件回端链接提供 Agent/宿主上下文归因信息,不是网盘账号身份,也不替代 CLI 自动获取的
owner_uid。 - 来源:由宿主或 Agent 运行时注入并在命令间原样透传;不得向用户索取、展示或用用户名、
session-id猜测。traceid已由登录流程或宿主自动注入时,保持原值。 - 适用范围:仅当命令需要生成文件回端链接时使用;目录链接仍由 CLI 使用目标路径和
owner_uid生成。 - 缺失处理:这两个值是可选的归因参数,不是生成文件链接的前提——文件链接只需要
fsid与owner_uid。宿主未注入时 CLI 仍返回target=file链接,Skill 照常原样展示return_markdown,不得因此声称无法生成查看链接,也不得自行伪造这两个值。
What ships with it
11 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- reference/authentication.md 4.0 KB
- reference/bdpan-commands.md 29 KB
- reference/examples.md 11 KB
- reference/notes.md 986 B
- reference/troubleshooting.md 11 KB
- scripts/install.sh 11 KB runs code
- scripts/login.sh 10 KB runs code
- scripts/memory-backup.sh 25 KB runs code
- scripts/uninstall.sh 4.2 KB runs code
- scripts/update.sh 8.8 KB runs code
- VERSION 7 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 4d ago Changed · +101 lines b67cac7b52a9
- 9d ago First seen · 407 lines · 174 tokens per session scan A 0753285b62f7
baidu-drive is a skill published in the GitHub repository baidu-netdisk/bdpan-storage (231 stars, last pushed 6d ago), licensed Apache-2.0. It adds 174 tokens to every session and 9,364 once invoked, about $0.0009 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
context-preservation
State capture and restore across context window compactions. Monitors usage thresholds and serializes quality, task, and spec state for seamless continuation.
project-context
Marks project context as unconfigured until domain constraints, repository quality standards, phase, conventions, and external-resource access are recorded. Use when project-specific context has not yet been configured.
session-search
Use Moraine MCP tools to recover prior agent-session context when the user refers to earlier work, decisions, failures, branches, files, or other agents.
autonomous-sync
Use this skill when the user wants to keep their Aicoo agent updated automatically, set up scheduled syncs, configure triggers for knowledge updates, use CRON jobs, /loop commands, file watchers, or hooks to push changes to Aicoo. Triggers on: 'auto sync', 'keep updated', 'schedule', 'CRON', 'loop', 'trigger', 'watch…
gdrive-backup
Weekly backup of config + encrypted memory to Google Drive.
AgentMail
Give the agent its own dedicated email inbox via AgentMail. Send, receive, and manage email autonomously using agent-owned email addresses (e.g. [email protected]).