Company Scan
v1.0.0快速筛选符合行业、地区、融资等条件的企业，返回包含基本信息的结构化列表。
⭐ 0· 46·0 current·0 all-time
byiyiou@ai-byte
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (company scanning by industry/region/funding) match the provided script and SKILL.md: the script posts JSON queries to an iyiou search endpoint and renders results as Markdown. No unrelated env vars, binaries, or config paths are requested.
Instruction Scope
SKILL.md stays on-task: it specifies how to parse user intent into search parameters, run the bundled Python script, require --output-temp to write results to the system temp directory, then read that file. It does not instruct the agent to read unrelated files or pull other credentials. Note: the runtime will execute the included Python code and perform network calls to the stated API.
Install Mechanism
No install spec (instruction-only) and no third-party installers are used. The skill does include executable Python code bundled with the skill; running it executes network I/O and writes a temp file, which is expected for this functionality.
Credentials
The skill requests no environment variables, no secrets, and no config paths. The network calls go to iyiou endpoints (consistent with the stated data source). No disproportionate credential access is requested.
Persistence & Privilege
always is false and the skill does not request persistent presence or attempt to modify other skills or system-wide settings. It allows normal autonomous invocation (platform default), which is expected for an actionable skill.
Assessment
This skill will execute the bundled Python script (scripts/search_companies.py) which posts search queries to https://api-open-data.iyiou.com and writes results to a temp file that the agent then reads and shows you. It does not request credentials or system config. Before installing, consider: 1) Are you comfortable the skill will make network calls to an external service (iyiou)? 2) Don't pass sensitive secrets or private data as search terms because those will be sent to the external API. 3) If you need offline or air-gapped operation, this skill will not work. If you want higher assurance, review the full script (already included) to confirm there are no additional network endpoints or behaviors beyond the documented API calls.Like a lobster shell, security has layers — review code before you run it.
latestvk9761atexc3vrf3pz6mm8a5vh184f2aj
License
MIT-0
Free to use, modify, and redistribute. No attribution required.