ClawHub
Back to skill

Security audit

百度搜索中文版

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Baidu web-search proxy with expected API-key and network use, but users should protect the local API key file.

Install only if you are comfortable sending search queries to Baidu under your API key. Use a dedicated key if possible, keep .env out of version control and shared folders, and run the documented 127.0.0.1 command rather than exposing the service on a public interface.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • MCP Least PrivilegeUnderdeclared Capability, Wildcard Permission, Missing Permission Declaration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (2)

Lp3

Medium
Category
MCP Least Privilege
Confidence
87% confidence
Finding
The skill clearly requires environment access for `BAIDU_API_KEY` and network access to call Baidu search APIs, but those capabilities are not declared as permissions. Undeclared sensitive capabilities weaken review and user consent, making it easier for a skill to access secrets or transmit data without clear visibility.

Missing User Warnings

Low
Confidence
78% confidence
Finding
The setup instructions tell users to write the API key directly into a local `.env` file but provide no warning that this file contains sensitive credentials. This can lead to accidental exposure through source control, file sharing, backups, or permissive filesystem access.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.