BigModel Web Search Fallback

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a coherent BigModel/Zhipu web-search fallback, with the main user-visible risks being use of a BigModel API key and sending search queries to an external provider.

Before installing, confirm you are comfortable providing a BigModel/Zhipu API key and sending search queries to open.bigmodel.cn. The artifacts do not show local file access, persistence, hidden endpoints, or destructive behavior.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

Low

#ASI03: Identity and Privilege Abuse

What this means

Using the skill may consume the user's BigModel/Zhipu API quota or billing allocation.

Why it was flagged

The script reads a BigModel/Zhipu API key from environment variables and sends it as bearer authentication to the provider. This is expected for the stated API integration, but it gives the skill access to the user's API account/quota and is not reflected in the registry credential declarations.

Skill content

os.environ.get("ZAI_API_KEY") or os.environ.get("ZHIPUAI_API_KEY") or os.environ.get("BIGMODEL_API_KEY") ... "Authorization": f"Bearer {api_key}"

Recommendation

Use a scoped API key where possible, monitor provider usage, and update metadata to declare the expected API-key environment variables.

Low

#ASI07: Insecure Inter-Agent Communication

What this means

Search questions, prompts, and related parameters may be processed by BigModel/Zhipu rather than staying local.

Why it was flagged

The skill sends search queries or chat prompts to BigModel/Zhipu endpoints. This is disclosed and purpose-aligned, but it means user-provided query text crosses an external provider boundary.

Skill content

WEB_SEARCH_URL = f"{BASE_URL}/paas/v4/web_search"
CHAT_URL = f"{BASE_URL}/paas/v4/chat/completions"

Recommendation

Avoid sending sensitive or confidential information in queries unless that provider use is acceptable under the user's privacy and data-handling requirements.