Bing Image Search Mcp
v0.1.0Auto-generated skill for bing-image-search-mcp tools via OneKey Gateway.
⭐ 0· 86·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name, description, declared environment variable (DEEPNLP_ONEKEY_ROUTER_ACCESS), and the code all consistently use the OneKey Gateway / OneKeyAgentRouter to perform Bing image searches. Required packages (@aiagenta2z/onekey-gateway and ai-agent-marketplace) align with the gateway integration.
Instruction Scope
Runtime instructions and scripts only read the provided JSON payload and the DEEPNLP_ONEKEY_ROUTER_ACCESS env var, then call router.invoke to a remote service. They do not access unrelated local files or credentials, but they will transmit whatever data you pass (including potentially sensitive queries) to the OneKey Gateway. Also the scripts fall back to a public demo key if you don't set your own key, which may send data to a shared/demo endpoint.
Install Mechanism
There is no binary download from a remote URL; dependencies are installed via npm and pip (public registries). That is a moderate-risk pattern because packages execute code when installed—verify the package owners and trustworthiness. The registry entry has no homepage/source and an unknown owner, so verify upstream package identity before installing.
Credentials
Only one env var is requested (DEEPNLP_ONEKEY_ROUTER_ACCESS), which is appropriate for a gateway service. However, the demo-key fallback means the skill will operate (and send data) even without your key—this lowers control over where your data goes and could expose payloads to the demo service.
Persistence & Privilege
The skill does not request permanent/always-on presence, does not modify other skills or system-wide agent settings, and uses normal, user-invocable model invocation. No elevated privileges are requested.
Assessment
This skill appears to do what it says (use OneKey Gateway to run Bing image searches). Before installing or using it: (1) decide whether you are comfortable sending queries to the external OneKey Gateway service—do not send sensitive data; (2) set DEEPNLP_ONEKEY_ROUTER_ACCESS to your own key (do not rely on the demo key) to avoid sending data to a shared demo endpoint; (3) verify the npm/pip package names and maintainers (@aiagenta2z/onekey-gateway, ai-agent-marketplace) and prefer packages from known publishers; (4) if you need stricter control, run the Python scripts in a restricted network environment or review traffic to the gateway endpoint; (5) because the registry entry has no homepage and the owner is unknown, exercise extra caution and prefer skills from trusted sources.Like a lobster shell, security has layers — review code before you run it.
latestvk976hqw8mr8vfp28yavdvj6m9x83cey5
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
