baidu web search

• Analyzed: May 11, 2026, 4:40 AM
• Findings: 1
• Version: 2.1.0
• Hash: 0cfc7403ac34ba7e7862b021b220e422e9bdc871c83b35c335d9800efb443335
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a legitimate implementation of a Baidu web search tool using the Baidu Qianfan API. The core logic in `scripts/search.js` correctly handles API credentials and communicates only with the official Baidu endpoint (qianfan.baidubce.com). Notably, the `SKILL.md` includes robust security instructions designed to prevent the AI agent from leaking or accessing the sensitive `BAIDU_API_KEY`, demonstrating good security practices rather than malicious intent.