Datayes Web Search
v1.0.0通用 AI 语义搜索技能，通过 Datayes gptMaterials/v2 API 执行结构化语义搜索。用户询问最新资讯、研报、公告、会议纪要、行业动态、指标背景材料时使用。优先通过仓库内 Python 脚本发起请求，不要手写 HTTP 请求，不要在 skill 中硬编码 token。
⭐ 0· 35·0 current·0 all-time
by@datayes
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description say it's a Datayes semantic search skill; the only required binary is python3 and the only required env var is DATAYES_TOKEN. Those are appropriate and proportional for calling Datayes APIs.
Instruction Scope
SKILL.md instructs the agent to run the included Python script, to read the token from DATAYES_TOKEN, and not to hardcode tokens. The script only builds a POST to Datayes gptMaterials/v2 and prints the raw JSON response. The instructions do not ask the agent to read unrelated files or send data to other endpoints. (Note: the script outputs raw API JSON, which may contain sensitive material from Datayes.)
Install Mechanism
No install spec; skill is instruction-only with included Python scripts. No third-party packages are pulled and the script uses only the Python standard library—low installation risk.
Credentials
Only DATAYES_TOKEN is required. That credential is directly needed for Authorization to Datayes and is justified by the skill's purpose. No unrelated secrets or config paths are requested.
Persistence & Privilege
always is false and the skill does not modify other skills or system config. It runs only when invoked and does not request permanent elevated presence.
Assessment
This skill appears coherent: it will run the included Python script and send your DATAYES_TOKEN bearer token to Datayes endpoints (gw.datayes.com). Before installing, make sure you trust Datayes and are willing to provide an API token; use a revocable token and follow least-privilege practices. Because the script prints the raw JSON returned by the API, be aware that returned data may include sensitive content—avoid pasting that output into untrusted places. If you need stricter controls, review or run the included scripts locally to confirm behavior and consider limiting network access or using short-lived tokens.Like a lobster shell, security has layers — review code before you run it.
latestvk978hc7mfwgktjezkq5ms4v2wd84tgnk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3
EnvDATAYES_TOKEN