ClawHub

Kimi Search

v1.0.1

使用 Moonshot Kimi API 的 $web_search 内置工具进行联网搜索。当需要进行网络搜索获取实时信息时使用，支持中文和英文搜索查询。需要配置 MOONSHOT_API_KEY。

⭐ 0· 745·9 current·11 all-time
by@chrisbdz
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description, declared primaryEnv (MOONSHOT_API_KEY), SKILL.md prose, and the included Python script all align: they call Moonshot's API (via the OpenAI-compatible client) to run Kimi's $web_search tool. No unrelated services, credentials, or binaries are requested.
✓
Instruction Scope
SKILL.md and the script stay within the stated scope: they only explain how to provide the MOONSHOT_API_KEY, install the 'openai' package, invoke the script, and let Kimi request $web_search tool calls. The README does reference storing the key in ~/.openclaw/openclaw.json (with a security warning) and restarting the gateway; both are consistent with how OpenClaw skills are configured.
✓
Install Mechanism
This is an instruction-only skill with an included Python script; there is no install spec, no remote download, and no archive extraction. The only dependency is the public 'openai' Python package installed via pip, which is proportionate.
✓
Credentials
Only one environment variable (MOONSHOT_API_KEY) is required and is the expected credential for the described Moonshot API usage. No other secrets or unrelated env vars are requested.
✓
Persistence & Privilege
The skill does not request 'always: true' or other elevated persistence. It runs as a normal, user-invocable skill and does not attempt to modify other skills or system-wide settings beyond recommending restarting the gateway after config changes (expected behavior).
Assessment
This skill appears to do exactly what it says: use your Moonshot (Kimi) API key to perform web searches. Before installing: 1) Only provide a valid MOONSHOT_API_KEY and avoid committing it to Git or other public places; prefer setting the env var for ephemeral use if you worry about disk-stored keys. 2) Installing/using the skill requires the 'openai' Python package—install from PyPI and verify you trust that package source. 3) The skill will make network calls to the Moonshot API and can incur charges; ensure your account/billing is acceptable. 4) If you want to be extra cautious, inspect the included script (scripts/kimi-search.py) yourself (it is short and readable) and rotate the API key if you later remove the skill. Overall, the bundle is coherent and proportionate, but treat the API key like any other secret.

Like a lobster shell, security has layers — review code before you run it.

kimivk9705c9jk4qvskemkr1rarpx7n82e2xzlatestvk9705c9jk4qvskemkr1rarpx7n82e2xzmoonshotvk9705c9jk4qvskemkr1rarpx7n82e2xzsearchvk9705c9jk4qvskemkr1rarpx7n82e2xzwebvk9705c9jk4qvskemkr1rarpx7n82e2xz

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvMOONSHOT_API_KEY
Primary envMOONSHOT_API_KEY

Comments