Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Baidu web-search helper that uses a configured Baidu API key and sends user search queries to Baidu as expected.
Before installing, treat BAIDU_API_KEY as a secret and avoid putting sensitive, private, or proprietary terms in searches because query text is sent to Baidu's external API. Review local OpenClaw config permissions if you store the key there.
The skill declares access to environment variables and performs external web search, but it does not declare an explicit tool scope such as permissions or allowed-tools. This weakens least-privilege controls and makes it harder for the platform or users to understand and constrain what the skill can access, increasing the risk of unintended data exposure or overbroad execution.
The skill description explains that it searches via Baidu AI Search API, but it does not clearly warn users that their queries will be transmitted to an external third-party service. Users may unknowingly send sensitive prompts, internal terms, or proprietary research topics off-platform, creating privacy and confidentiality risks.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
Visit: **https://console.bce.baidu.com/ai-search/qianfan/ais/console/apiKey**
- Log in to your Baidu Cloud account
- Create an application or view existing API keys
- Copy your **API Key** (only API Key is needed)
### 2. Configure OpenClaw
The guide directs users to store a live API key in a local JSON configuration file but does not warn that the credential is sensitive, should be protected with restrictive file permissions, and must not be committed, shared, or logged. This increases the risk of credential disclosure through local compromise, backups, screenshots, support bundles, or accidental source-control check-in.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
}
# 使用POST方法发送JSON数据
response = requests.post(url, json=requestBody, headers=headers)
response.raise_for_status()
results = response.json()
if "code" in results:
At L019, the code performs an HTTP POST to a third-party endpoint using request data derived from the user's input. Although the script logs parsed input and errors, it does not clearly warn the user that their query content will be transmitted to an external service.
The examples and sample queries are exclusively in Chinese, which can imply a fixed language expectation for use of the skill. Because no opt-in or language choice is stated, this may conflict with a policy requiring skills not to force a specific language or locale without user selection.