ClawHub
Back to skill

Security audit

Baidu Search

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Baidu web-search skill that sends user search queries to Baidu using a declared API key and does not show hidden persistence, destructive behavior, or unrelated access.

Install this only if you are comfortable sending search queries to Baidu's AI Search API and exposing a BAIDU_API_KEY to the skill process. Avoid using it for confidential prompts, credentials, private project names, or regulated data unless that external provider use is acceptable for your environment.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Lp3

Medium
Category
MCP Least Privilege
Confidence
90% confidence
Finding
The skill declares that it requires an environment variable containing an API key and performs web search operations, but there is no explicit permissions declaration to make those capabilities visible and governable. This creates a transparency and policy-enforcement gap: users or orchestrators may invoke a skill with network and secret access without clear permission signaling, increasing the risk of unintended data exposure or over-privileged execution.

Missing User Warnings

Medium
Confidence
83% confidence
Finding
The script sends the user's query content directly to Baidu's external API, which can expose sensitive prompts, internal project names, credentials pasted into queries, or other confidential data if users are not clearly warned at execution time. In a search skill this data flow is expected, but it still creates a real privacy and data-governance risk because all search terms are transmitted off-system.

External Transmission

Medium
Category
Data Exfiltration
Content
}

    # 使用POST方法发送JSON数据
    response = requests.post(url, json=requestBody, headers=headers)
    response.raise_for_status()
    results = response.json()
    if "code" in results:
Confidence
86% confidence
Finding
requests.post(url, json=

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.