ClawHub
Back to skill

Security audit

百度搜索中文版

Security checks for vulnerabilities and agentic risk

Overview

This is a straightforward Baidu web-search proxy with expected API-key and network use, but users should protect the local API key file.

Install only if you are comfortable sending search queries to Baidu under your API key. Use a dedicated key if possible, keep .env out of version control and shared folders, and run the documented 127.0.0.1 command rather than exposing the service on a public interface.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
87% confidence
Finding
The skill clearly requires environment access for `BAIDU_API_KEY` and network access to call Baidu search APIs, but those capabilities are not declared as permissions. Undeclared sensitive capabilities weaken review and user consent, making it easier for a skill to access secrets or transmit data without clear visibility.

Missing User Warnings

Low
Confidence
78% confidence
Finding
The setup instructions tell users to write the API key directly into a local `.env` file but provide no warning that this file contains sensitive credentials. This can lead to accidental exposure through source control, file sharing, backups, or permissive filesystem access.

Static analysis

No suspicious patterns detected.