Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Baidu Search 1

Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 21 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The skill's name, description, and code align with a Baidu AI web-search helper and the only required credential (BAIDU_API_KEY) is appropriate. However, metadata inconsistencies are present: the top-level registry Owner ID differs from the _meta.json ownerId, and the declared version (1.0.0) differs from _meta.json version (1.1.3). The package has no homepage or published source URL, which reduces provenance trust.
Instruction Scope
SKILL.md and scripts/search.py stick to the advertised scope: they construct a request to Baidu's qianfan API and print results. The reference instructions ask you to store BAIDU_API_KEY in ~/.openclaw/openclaw.json and restart OpenClaw — this is consistent with configuring an agent but does instruct writing a secret into a config file. The runtime does not read unrelated files or other env vars.
Install Mechanism
This is an instruction-only skill with a small Python script and no install spec. No archive downloads or external installers are used, so install mechanism risk is low.
Credentials
Only BAIDU_API_KEY is required and is appropriate for calling Baidu's API. Minor concern: the README suggests placing the key into ~/.openclaw/openclaw.json (plaintext in a config file). The code itself reads the key from the BAIDU_API_KEY environment variable. No other credentials are requested.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide settings. It runs only when invoked by the user or agent per normal defaults.
What to consider before installing
This skill appears to be a straightforward wrapper around Baidu's qianfan web_search API, but exercise caution before installing: 1) Verify provenance — there is no homepage and the metadata owner/version in _meta.json doesn't match the registry metadata, which could indicate a repackaging or stale files. 2) Confirm dependencies — the script uses the Python 'requests' package but SKILL.md does not declare it; ensure your environment has requests installed. 3) Secrets handling — the reference suggests putting BAIDU_API_KEY into ~/.openclaw/openclaw.json; prefer storing API keys in a secure secrets store or agent-managed secret mechanism rather than plaintext config if possible. 4) Test in an isolated environment (or sandboxed agent) first and review the included scripts visually (you already have them) to confirm there are no hidden endpoints or unexpected network calls. If you cannot verify the author/source, treat the skill as higher risk and consider not installing or restricting its permissions.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk974nq5b5a5985wfa7s3pka191836zkv

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🔍︎ Clawdis
Binspython3
EnvBAIDU_API_KEY
Primary envBAIDU_API_KEY

SKILL.md

Baidu Search

Search the web via Baidu AI Search API.

Prerequisites

API Key Configuration

This skill requires a BAIDU_API_KEY to be configured in OpenClaw.

If you don't have an API key yet, please visit: https://console.bce.baidu.com/ai-search/qianfan/ais/console/apiKey

For detailed setup instructions, see: references/apikey-fetch.md

Usage

python3 skills/baidu-search/scripts/search.py '<JSON>'

Request Parameters

ParamTypeRequiredDefaultDescription
querystryes-Search query
countintno10Number of results to return, range 1-50
freshnessstrnoNullTime range, two formats: format one is ”YYYY-MM-DDtoYYYY-MM-DD“, and format two includes pd, pw, pm, and py, representing the past 24 hours, past 7 days, past 31 days, and past 365 days respectively

Examples

# Basic search
python3 scripts/search.py '{"query":"人工智能"}'

# Freshness first format "YYYY-MM-DDtoYYYY-MM-DD" example
python3 scripts/search.py '{
  "query":"最新新闻",
  "freshness":"2025-09-01to2025-09-08"
}'

# Freshness second format pd、pw、pm、py example
python3 scripts/search.py '{
  "query":"最新新闻",
  "freshness":"pd"
}'

# set count, the number of results to return
python3 scripts/search.py '{
  "query":"旅游景点",
  "count": 20,
}'

Current Status

Fully functional.

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…