ClawHub

Baidu Search

v1.1.4

Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.

⭐ 0· 67·0 current·0 all-time
by@cgxxxxxxxxxxxx
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
The name/description (Baidu web search) matches the code and declared requirements: the script sends queries to a Baidu AI search endpoint (qianfan.baidubce.com) and uses BAIDU_API_KEY for Authorization. Required binary (python3) is appropriate for running the included Python script.
✓
Instruction Scope
SKILL.md instructs the agent to invoke the provided Python script with a JSON payload. The script only reads the BAIDU_API_KEY environment variable and the provided JSON argument, calls the Baidu endpoint, and returns filtered results; it does not access other files, unrelated env vars, or external endpoints beyond Baidu.
ℹ
Install Mechanism
There is no install spec (instruction-only), which minimizes install risk. The package includes a Python script that makes HTTP requests but the metadata does not declare the Python 'requests' dependency — callers will need that package available or the script will fail. No remote downloads or archive extraction are performed.
✓
Credentials
Only BAIDU_API_KEY is required and is the declared primary credential. That key is used only to authenticate requests to the Baidu search API (sent in the Authorization header). No other credentials or broad filesystem/config paths are requested.
✓
Persistence & Privilege
The skill is not always-enabled, is user-invocable, and does not request persistence or modify other skills or system-wide settings. It does not elevate privileges.
Assessment
This skill appears to do what it claims, but take these precautions before installing: (1) Only provide a BAIDU_API_KEY you trust to this skill — the key will be sent to Baidu's qianfan.baidubce.com endpoint. (2) Verify the publisher or obtain an official homepage if you need provenance (the package metadata in the files shows inconsistent owner/slug/version values). (3) Ensure Python's 'requests' is installed in the runtime environment or the script will fail. (4) Monitor your Baidu API usage and rotate or scope the key if possible. If you need stronger assurance, ask the publisher for an official homepage or signed release artifacts.

Like a lobster shell, security has layers — review code before you run it.

latestvk97f5x3q7fsder038y6c5kf7wh84avh5

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🔍︎ Clawdis
Binspython3
EnvBAIDU_API_KEY
Primary envBAIDU_API_KEY

Comments