Bailian KnowledgeBase Retrieve

Bailian KnowledgeBase(Provided by Alibaba ModelStdio) offers to retrieve any proprietary data that have been vectorized in the hosted knowledgebases. It retu...

Security Scan

The skill's code, instructions, and requested credentials align with its stated purpose of retrieving vectorized documents from an Alibaba-hosted knowledgebase; no evidence of unrelated data access or hidden endpoints was found.

Purpose & Capability

Name/description (Bailian KnowledgeBase retrieve) matches what the code does: it sends a search request to an Alibaba/Dashscope retrieve API using a knowledgebase ID and API key. The requested env vars (DASHSCOPE_API_KEY, KNOWLEDGEBASE_ID) are directly used by the script.

Instruction Scope

SKILL.md instructs running scripts/retrieve.py with a query and optional count. The script only reads the two declared environment variables, constructs an API request to dashscope.aliyuncs.com, and prints the JSON response. There are no commands that read arbitrary files, shell history, other env vars, or send data to unexpected endpoints.

Install Mechanism

This is instruction-only (no install spec), so nothing is written to disk by an installer. Minor mismatch: the Python script imports the third-party 'requests' library but SKILL.md/metadata only require 'python3' (it does not declare that 'requests' must be present). Users must ensure the runtime has the 'requests' package installed.

Credentials

The skill requires two env vars: an API key (primaryEnv) and a knowledgebase ID. Both are proportionate and used exclusively to authenticate and target the retrieve request. No unrelated credentials or broad system config paths are requested.

Persistence & Privilege

Skill is not always-installed and does not request persistent system changes. It does not modify other skills or system-wide settings. Autonomous model invocation is allowed by default but is not combined with other concerning privileges.

Assessment

This skill appears coherent and performs exactly what it says: it will send your query and the provided DASHSCOPE_API_KEY and KNOWLEDGEBASE_ID to the Dashscope/Aliyun retrieve endpoint and print returned documents. Before installing or using it, verify the following: (1) only provide an API key that is scoped/limited to the specific knowledgebase (avoid sharing full account/root keys); (2) confirm you trust the skill source and the Alibaba endpoint used (dashscope.aliyuncs.com) because responses may contain proprietary content; (3) ensure the runtime environment has the Python 'requests' package installed (the SKILL.md only lists python3); (4) consider using short-lived or revocable credentials and auditing access logs on your knowledgebase; and (5) avoid passing highly sensitive queries unless you are comfortable that the remote service and provided API key are trusted and access-controlled.

Vector-based hosted KnowledgeBase with Bailian Embedding/Rerank API. Designed for AI agents and chatbots - returns clean, relevant content in your proprietary datahub.

Retrieve(Search)

python3 {baseDir}/scripts/retrieve.py "query"
python3 {baseDir}/scripts/retrieve.py "query" 3

Options

• <count>: Number of results (default: 5, max: 20)
• <query>: User Query for KB Retrieval