Aliyun Search 1.0.0

Perform web searches using Alibaba Cloud UnifiedSearch API. Provides advanced search capabilities with configurable parameters.

Security Scan

The skill's code and instructions match the advertised Alibaba Cloud UnifiedSearch purpose, but metadata and instructions are inconsistent about required credentials and filenames, and the package/source is unverified — verify before supplying cloud keys.

Purpose & Capability

The name, description, SKILL.md, and included script all implement Alibaba Cloud UnifiedSearch functionality and network calls to opensearch.cn-hangzhou.aliyuncs.com, which is coherent with the stated purpose. Minor inconsistencies: SKILL.md examples refer to 'python search.py' while the script is at scripts/search.py and the script's own usage message references aliyun-search.py.

Instruction Scope

Runtime instructions are narrowly scoped to performing searches via the Alibaba UnifiedSearch API: they instruct installing Python deps, setting Alibaba Cloud creds via environment variables, and running the provided script. The code only reads the two Alibaba environment variables, constructs an API request, and formats results — it does not access other system files or external endpoints beyond the expected Alibaba domain.

Install Mechanism

There is no automated install spec (lowest install risk) but the package includes an executable script. SKILL.md instructs installing packages via pip (aliyun-python-sdk-core, requests). The pip package name in the README may not exactly match the import used in code (code imports aliyunsdkcore), which is an implementation detail to confirm before running.

Credentials

The script and SKILL.md require ALIBABA_CLOUD_ACCESS_KEY_ID and ALIBABA_CLOUD_ACCESS_KEY_SECRET, but the skill's registry metadata lists no required environment variables or primary credential. That omission is a mismatch and reduces transparency; requesting full Alibaba account credentials is a sensitive privilege and should be clearly declared and justified in metadata. Confirm exact required IAM permissions and avoid providing overly broad keys.

Persistence & Privilege

The skill does not request persistent privileges (always is false) and does not modify other skills or system configs. Autonomous invocation is allowed by default but is not combined here with other high-risk factors.

What to consider before installing

This skill appears to genuinely call Alibaba Cloud UnifiedSearch, but there are transparency and small consistency issues you should address before installing or running it with real credentials: 1) The registry metadata does not declare the two Alibaba environment variables the script expects — ask the publisher to update metadata so you can see required secrets up front. 2) Verify the source/owner and ask for a homepage or repository link; the package currently has no verified source. 3) Check the import vs pip package names (aliyunsdkcore vs aliyun-python-sdk-core) and test in an isolated environment. 4) When you create or use AccessKey/Secret, apply least-privilege IAM policies (restrict to only the needed UnifiedSearch actions and resources) and avoid using root account keys. 5) Review the included scripts yourself or have someone you trust review them; if you must run immediately, do so from an isolated VM/container and with temporary, limited-scope credentials. If the publisher supplies correct metadata, package source, and a clear minimal-permission IAM guidance, the concerns here would be reduced.

Alibaba Cloud UnifiedSearch Skill

This skill provides the ability to perform web searches using Alibaba Cloud UnifiedSearch API.

Features

• Support multiple search engine types (Generic, GenericAdvanced, LiteAdvanced)
• Configurable time range filtering
• Category-specific search (finance, law, medical, etc.)
• Location-based search (city/IP)
• Rich result formatting

Usage

Basic Usage

python search.py "云栖大会"

Advanced Usage

python search.py "北京天气" --engine-type "Generic" --city "北京市"

python search.py "金融新闻" --category "finance" --time-range "OneWeek" --engine-type "GenericAdvanced"

Scripts

• search.py: Python implementation of Alibaba Cloud UnifiedSearch API

Configuration

Before using, you need to:

1. Obtain Alibaba Cloud AccessKey and Secret
2. Set environment variables:

   export ALIBABA_CLOUD_ACCESS_KEY_ID="your_access_key_id"
   export ALIBABA_CLOUD_ACCESS_KEY_SECRET="your_access_key_secret"
   

3. Ensure the required permissions are granted
4. Install dependencies: pip install aliyun-python-sdk-core requests