baidu baike search

• Analyzed: May 12, 2026, 3:23 AM
• Findings: 1
• Version: 1.0.1
• Hash: da9ac8ffbfd0f35115e6fbc97a08b2b744cc369f38540a32f36583c230e01d6f
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed to query the Baidu Baike API, which is clearly aligned with its stated purpose. It uses `curl` to make API requests to `appbuilder.baidu.com` and authenticates using a `BAIDU_API_KEY` environment variable, which is standard practice for API integrations. There is no evidence of data exfiltration to unauthorized endpoints, malicious command execution, persistence mechanisms, or prompt injection attempts against the agent in `SKILL.md` that would deviate from its intended function.