Zhipu Search

• Risk level: Low
• Analyzed: Feb 21, 2026, 5:00 PM
• Findings: 0
• Version: 1.5.0

Overview

The skill is internally consistent: it only requires a ZHIPU_API_KEY, calls the official Zhipu API endpoint, and its scripts/instructions match the described web-search purpose.

This skill is coherent and appears to do only what it claims, but before installing: only set the ZHIPU_API_KEY in trusted, non-shared environments (or use per-command env injection), limit the key's permissions and rotate it regularly, verify you trust open.bigmodel.cn for your data, and ensure curl/jq are up-to-date. Avoid putting long-lived keys in shell startup files on multi-user machines and be aware responses from the API may contain links or content you should vet before following.