百度搜索
v1.1.2Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.
⭐ 0· 76·4 current·5 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (Baidu search) align with the code and instructions: the script calls a Baidu AI Search endpoint and only requires an API key. No unrelated services, credentials, or system resources are requested.
Instruction Scope
The SKILL.md instructs running the included Python script with a JSON argument and the script only reads the provided JSON and the BAIDU_API_KEY env var. The script prints a parsed-request debug line and standard error messages to stdout/stderr — this may surface the user query in logs. Otherwise it does not read other files, paths, or unrelated environment variables.
Install Mechanism
This is an instruction-only skill with a small included Python script and no install spec. That is the lowest-risk install model.
Credentials
Only BAIDU_API_KEY is required and it is used directly as a Bearer token for the Baidu endpoint — this is proportional. Minor issue: the script depends on the Python 'requests' package but the skill metadata only declares python3 as a required binary; the dependency is not documented.
Persistence & Privilege
The skill does not request persistent or elevated platform privileges (always:false). Autonomous invocation is allowed by platform default but it is not combined with broad credentials or system access here.
Assessment
The skill appears to do what it states: call Baidu's web-search API using an API key. Before installing: (1) make sure you trust the publisher — the _meta.json ownerId in the package differs from the registry owner id shown in the listing, which could indicate repackaging or a packaging mismatch; (2) ensure the Python runtime has the 'requests' package available (the script will fail otherwise); (3) store BAIDU_API_KEY securely and only grant this skill that single key; (4) be aware the script prints the parsed query to stdout (it may end up in logs), so avoid sending sensitive prompts. If any of these points worry you, run the script in an isolated environment or request the publisher clarify the owner mismatch and explicitly list Python dependencies.Like a lobster shell, security has layers — review code before you run it.
latestvk975a7jx742ej62b88ej0b3tts83nhmg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔍︎ Clawdis
Binspython3
EnvBAIDU_API_KEY
Primary envBAIDU_API_KEY