招标中标查询&数据分析-乙方宝
v1.0.3全网招中标数据查询与分析助手。当用户涉及以下任何场景时，必须使用此SKILL：查询招标/中标公告、搜索标讯、查找临期/即将到期项目、商机预测、推荐潜在投标供应商、分析公司主营业务/历史中标、查询公司上下游合作客户与供应商、分析竞争对手/竞对企业、查询Top采购单位/Top中标单位/Top中标品牌、招中标数据统计分...
⭐ 0· 123·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Skill name/description (招标/中标查询与分析) match the single required credential (ZLBX_API_KEY) and the documented API endpoints. No unrelated env vars, binaries, or config paths are requested.
Instruction Scope
SKILL.md contains detailed API docs (endpoints, headers, params) and instructs the agent to use the env var ZLBX_API_KEY for X-API-Key. It also states the skill must be used whenever bidding/procurement keywords appear — this is consistent with a domain-specific tool but may lead to frequent autonomous invocations if enabled.
Install Mechanism
Instruction-only skill with no install spec and no code files; nothing is written to disk and no third-party packages are pulled in.
Credentials
Only a single API key (ZLBX_API_KEY) is required and is declared as the primary credential. The key is appropriate for calling the documented external API; no unrelated secrets are requested.
Persistence & Privilege
always is false, no install-time persistence requested, and no cross-skill/system config modifications are indicated. Note: model-invocation is allowed (default), so the agent may call the external API autonomously when the skill is triggered.
Assessment
This skill is coherent with its stated purpose but comes from an unknown source and will use whatever ZLBX_API_KEY you provide to call the documented endpoints. Before installing: (1) verify the vendor and the domain (mcp-server.zhiliaobiaoxun.com / ai.zhiliaobiaoxun.com) and review their privacy/terms; (2) only provide an API key scoped to this service (do not reuse high-privilege or cloud-wide keys); (3) store the key in a secrets manager or environment isolated for this skill and avoid pasting it into chat; (4) monitor and limit usage/quota and rotate the key if you suspect misuse; (5) if you are uncomfortable with autonomous calls when bidding-related keywords appear, keep model invocation manual or restrict when the skill is used.Like a lobster shell, security has layers — review code before you run it.
latestvk97ast830csqd2sq4cr9z4xjj184mkzg
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvZLBX_API_KEY
Primary envZLBX_API_KEY