Moark Web Search
v1.0.0Search web content such as webpages, images, and videos using the /web-search API with an Access Token.
⭐ 0· 71·0 current·0 all-time
by@fchange
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description claim a web search via a /web-search API and the code calls https://ai.gitee.com/v1/web-search using an Authorization: Bearer <token>. The declared env var GITEEAI_API_KEY is directly used as the API key; there are no unrelated credentials or capabilities requested.
Instruction Scope
SKILL.md instructs running the bundled Python script, installing requests, and parsing the printed SEARCH_RESULTS_JSON line. The script only reads the provided CLI arg or GITEEAI_API_KEY, makes an HTTP POST to the declared API, and prints the JSON results. It does not read other files, system config, or additional environment variables.
Install Mechanism
This is instruction-only with a bundled script; there is no install spec that downloads arbitrary code. The README suggests a standard pip install requests, which is proportionate to a Python script that uses requests.
Credentials
Only one credential (GITEEAI_API_KEY) is required and it is used only for Authorization to the API endpoint. No other SECRET/TOKEN/PASSWORD env vars are requested and the script does not access additional config paths.
Persistence & Privilege
The skill is not always-enabled and does not request persistent system changes or modify other skills. It does perform network calls when invoked (normal for a web-search integration).
Assessment
This skill appears to be a straightforward wrapper around Gitee AI's web-search API. Before installing, ensure you trust the Gitee AI service (https://ai.gitee.com) and are comfortable providing an API key. Provide a dedicated, minimally-scoped API key if possible and monitor/rotate it if you suspect misuse. Also confirm your agent environment allows outgoing network requests, and be aware the script will send your queries to the remote API (results will be printed back to the agent).Like a lobster shell, security has layers — review code before you run it.
latestvk9718yjdbe0086hwf18snstp3n83gf96
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔎 Clawdis
EnvGITEEAI_API_KEY
Primary envGITEEAI_API_KEY
