ClawHub

招标中标查询及分析-知了标讯

v1.4.1

全网招中标数据查询与分析助手。当用户涉及以下任何场景时，必须使用此SKILL：查询招标/中标公告、搜索标讯、查找临期/即将到期项目、商机预测、推荐潜在投标供应商、分析公司主营业务/历史中标、查询公司上下游合作客户与供应商、分析竞争对手/竞对企业、查询Top采购单位/Top中标单位/Top中标品牌、招中标数据统计分...

⭐ 0· 130·0 current·0 all-time
by@liu-jiapeng
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description describe a tender search & analysis assistant and the skill only requires a single API key (ZLBX_API_KEY) and documents HTTPS API endpoints and request formats — these are coherent and expected.
ℹ
Instruction Scope
SKILL.md is an instruction-only spec that tells the agent to call the zhiliaobiaoxun API for various query tools and to prefer the ZLBX_API_KEY from env. It also instructs the agent to use this SKILL whenever procurement-related keywords appear — this can cause the agent to automatically route user queries to the external service, which is expected but may result in more outgoing API calls than the user expects.
✓
Install Mechanism
No install spec or code files are present (instruction-only), so nothing is written to disk. Network calls to the documented HTTPS API are the only runtime side effect described.
✓
Credentials
Only one credential (ZLBX_API_KEY) is required and is clearly the API key for the documented service. This is proportional to the stated functionality. There are no unrelated credentials or config paths requested.
✓
Persistence & Privilege
always is false and the skill does not request persistent system-level privileges or modifications to other skills. Autonomous invocation is allowed but is the platform default.
Assessment
This skill is internally consistent, but before enabling it: (1) verify the provider (no homepage/source author is supplied) and confirm the API endpoint is trustworthy, (2) only supply the ZLBX_API_KEY via a secret manager or environment variable (never paste it into chat), (3) consider what user data will be sent to the external API (company names, contacts, bid details) and whether that sharing is allowed under your privacy/compliance requirements, and (4) monitor API usage and limit the key's scope/permissions and rotation in case of misuse.

Like a lobster shell, security has layers — review code before you run it.

latestvk97ej53dmcs6jmx0g7e8zqvbq984e2hp

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

EnvZLBX_API_KEY
Primary envZLBX_API_KEY

Comments