技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 115 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：良性 · OpenClaw ：可疑
Package：382108113/baidu-netdisk-eva
安全扫描（ClawHub）
- VirusTotal ：良性
- OpenClaw ：可疑
OpenClaw 评估
The skill's code and README match the stated purpose (Baidu Netdisk operations) and only need two Baidu credentials, but the package metadata does not declare those required environment variables and the source/owner is unclear — this mismatch is suspicious and worth caution.
目的
The skill name/description (Baidu Netdisk file listing/search/dir creation) align with the implementation: the Python script calls the official pan.baidu.com REST API. However, the registry metadata lists no required environment variables or primary credential while both SKILL.md and scripts/main.py require BAIDU_APP_ID and BAIDU_NETDISK_TOKEN. This is an inconsistency (likely sloppy packaging) but the credentials themselves are appropriate fo…
说明范围
SKILL.md instructs setting two environment variables and the included script only reads those env vars and calls Baidu Netdisk endpoints (list/search/create). There are no instructions to read unrelated files, other system credentials, or to exfiltrate data to third-party endpoints outside pan.baidu.com.
安装机制
There is no install spec (instruction-only + bundled Python script). The runtime uses python3 and the script uses the requests library but no dependency declaration is provided; this is a packaging/runtime completeness issue rather than an obvious security problem.
证书
The code and SKILL.md require BAIDU_APP_ID and BAIDU_NETDISK_TOKEN which are reasonable and sufficient for the stated functions. The concern is that the skill metadata did not declare these required environment variables or a primary credential, which can hide the need for sensitive tokens from users. The required env vars are sensitive (access_token) and should be clearly declared.
持久
The skill does not request 'always: true', does not modify other skills or system-wide settings, and has no self-installing behavior. Autonomous invocation is allowed (platform default) but is not combined with other high-risk properties here.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「百度网盘 EVA」。简介：管理和操作百度网盘文件，实现文件列出、搜索及目录创建功能，需配置AppID和access_token。。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/382108113/baidu-netdisk-eva/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
# 百度网盘 Skill
管理百度网盘文件。
## 触发条件
用户提到：百度网盘、网盘、文件上传、文件下载、文件管理
## 功能
### 列出文件
```
列出根目录文件
列出 /EVA 目录文件
```
### 搜索文件
```
搜索 centos
搜索 电影
```
### 创建目录
```
在网盘创建 /测试 目录
```
## 配置说明
使用前需要配置环境变量：
```bash
# 设置环境变量（Mac/Linux）
export BAIDU_APP_ID="你的AppID"
export BAIDU_NETDISK_TOKEN="你的access_token"
```
### 如何获取 access_token
1. 打开百度网盘开放平台创建应用
2. 获取 AppID、AppKey、SecretKey
3. 按文档获取 OAuth access_token
详细步骤参考：https://pan.baidu.com/union/doc/
## 技术实现
- Python 脚本调用百度网盘 REST API
- 使用 OAuth 授权（更安全）
- 凭证从环境变量读取，不硬编码
## 文件位置
- 脚本: scripts/main.py
- 配置: skill.json
## 版本
- v1.0.0 - 基础功能：列出、搜索、创建目录