Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Baidu web search helper that sends user search queries to Baidu using a required API key, with no evidence of persistence, hidden behavior, or destructive actions.
Before installing, understand that any query you submit will be sent to Baidu's search API using your BAIDU_API_KEY. Avoid searching for secrets, regulated personal data, or confidential internal material unless sharing it with that provider is approved.
The skill invokes code that uses environment variables and makes outbound network requests, but the manifest does not declare an explicit tool scope such as permissions or allowed-tools. This weakens policy enforcement and user visibility, making it easier for the skill to access sensitive capabilities without clear declaration or review.
The skill description says it performs web search but does not clearly disclose that user queries are transmitted to Baidu's external API using an API key. This can lead users to provide sensitive prompts or internal data without understanding that the content leaves the local system and is shared with a third party.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
}
# 使用POST方法发送JSON数据
response = requests.post(url, json=requestBody, headers=headers)
response.raise_for_status()
results = response.json()
if "code" in results:
The skill sends the user-provided query to Baidu's external search service, which can expose sensitive user input to a third party if users are unaware of the data flow. In a search skill this transmission is expected, but the lack of explicit disclosure or consent can still create a privacy and data-handling risk, especially if users submit secrets, internal data, or regulated content.
The only concrete example queries are in Chinese and the skill is branded around Baidu, which suggests a Chinese-language default experience, but the documentation does not state whether other languages are supported or whether Chinese is required. Under the policy, forcing or implying a specific language without opt-in can be a natural-language policy issue unless the locale constraint is explicitly documented and justified.
The stated purpose is to search the web using Baidu's search service. While outbound HTTP is expected for that purpose, reading process environment state to obtain secrets is an additional capability not reflected in the manifest description. This is a mild intent mismatch because the code depends on credential access beyond the user-visible search behavior.