Baidu Search V2

Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.

Security Scan

The skill's code, required environment variable, and runtime instructions align with its stated purpose (Baidu web search); nothing in the files indicates hidden exfiltration or unrelated privileges, though there are minor provenance and dependency issues to review.

Purpose & Capability

Name/description match the code and declared requirement. The script calls a Baidu web-search API and requires BAIDU_API_KEY and python3, which are appropriate for a web-search skill.

Instruction Scope

SKILL.md instructs running scripts/search.py with a JSON payload; the script only reads the provided JSON and the BAIDU_API_KEY env var, constructs a search request, and returns results. It does not read other files, other env vars, or transmit data to unexpected endpoints beyond the Baidu endpoint (qianfan.baidubce.com).

Install Mechanism

No install spec (instruction-only) which minimizes installation risk. The script uses the Python 'requests' package but no dependency installation is declared — this is a usability/packaging omission rather than malicious behavior.

Credentials

Only BAIDU_API_KEY is required and is used as a Bearer token to call the Baidu API. The requested environment access is proportional to the skill's stated function.

Persistence & Privilege

Skill is not 'always' enabled and does not request system-wide configuration changes or access to other skills' credentials. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.

Assessment

This skill appears to do what it claims: send search queries to Baidu using BAIDU_API_KEY. Before installing, verify the BAIDU_API_KEY you provide is scoped appropriately and replaceable if compromised. Note the package has no install script and assumes the Python 'requests' library is present — you may need to install it. Also consider the provenance: source/homepage are missing and _meta.json metadata (owner/version/timestamp) differs from the registry metadata, so if you need high assurance about origin, ask the publisher for provenance or prefer an officially published integration. Finally, be aware that all queries and returned data will be sent to/received from Baidu's endpoint (qianfan.baidubce.com).

Baidu Search

Search the web via Baidu AI Search API.

Usage

python3 skills/baidu-search/scripts/search.py '<JSON>'

Request Parameters

Param	Type	Required	Default	Description
query	str	yes	-	Search query
count	int	no	10	Number of results to return, range 1-50
freshness	str	no	Null	Time range, two formats: format one is ”YYYY-MM-DDtoYYYY-MM-DD“, and format two includes pd, pw, pm, and py, representing the past 24 hours, past 7 days, past 31 days, and past 365 days respectively

Examples

# Basic search
python3 scripts/search.py '{"query":"人工智能"}'

# Freshness first format "YYYY-MM-DDtoYYYY-MM-DD" example
python3 scripts/search.py '{
  "query":"最新新闻",
  "freshness":"2025-09-01to2025-09-08"
}'

# Freshness second format pd、pw、pm、py example
python3 scripts/search.py '{
  "query":"最新新闻",
  "freshness":"pd"
}'

# set count, the number of results to return
python3 scripts/search.py '{
  "query":"旅游景点",
  "count": 20,
}'

Current Status

Fully functional.