Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Baidu Nearby / 百度能力集合

v1.0.4

百度能力集合 - 提供百度搜索和百度地图路线规划功能。 包含:百度网页搜索(baidu_search)、路线规划(baidu_direction)、附近场所推荐(baidu_nearby)。 Use when: 需要搜索网页、规划出行路线、查找附近餐饮/景点/酒店等位置服务时。

1· 419·0 current·0 all-time
byjuanfenglong@longjf25
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description, SKILL.md, and the three Python scripts all implement Baidu web search, place search, and route planning and request only Baidu-related APIs. The requested credential (BAIDU_API_KEY / BAIDU_AK) is appropriate for the stated functionality. However, the registry-level requirements listed earlier (Required env vars: none) contradict SKILL.md and the code — a manifest inconsistency that should be clarified.
Instruction Scope
Runtime instructions are limited to exporting BAIDU_API_KEY and running the included Python scripts. The scripts perform HTTP(S) calls only to Baidu endpoints (api.map.baidu.com and www.baidu.com) and do not attempt to read unrelated system files, credentials, or send data to third-party endpoints.
Install Mechanism
No install spec (instruction-only) and the code uses only the Python standard library. No downloads from external or untrusted URLs are performed by an installer. The presence of code files with no installer is acceptable but means the scripts will run as-is when invoked.
Credentials
The only sensitive environment variables used in code are BAIDU_API_KEY and BAIDU_AK, which are sensible for Baidu LBS APIs. The proportionality is fine for the stated purpose. The notable issue is that the registry metadata reported 'Required env vars: none' while SKILL.md marks BAIDU_API_KEY as required and the scripts read it — this mismatch could lead to accidental omission of the API key or confusion about what credentials are needed.
Persistence & Privilege
Skill does not request elevated platform privileges (always:false), does not modify other skills' configs, and has no declared config path or persistence behavior. It only runs when invoked.
What to consider before installing
This skill appears to implement exactly what it claims (Baidu search and map/nearby queries) and only needs a Baidu API key. Before installing: 1) Confirm and correct the metadata inconsistency (registry says no env vars while SKILL.md/code require BAIDU_API_KEY). 2) Only provide a BAIDU_API_KEY you trust for this purpose (do not reuse highly privileged keys). 3) Inspect the included scripts yourself or run them in a sandboxed environment (they perform network requests). 4) Note the _meta.json has a different version/timestamp than SKILL.md — ask the publisher for clarification if you don't trust the owner. If those discrepancies are resolved, the skill is coherent with its stated purpose.

Like a lobster shell, security has layers — review code before you run it.

latestvk972y1rys2pn9g9h2p4dwzw1rn83vh31latest baidu map search locationvk972y1rys2pn9g9h2p4dwzw1rn83vh31

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Baidu Nearby / 百度能力集合

Baidu capability suite providing search and location services. / 百度能力集合,提供搜索和位置服务。

Features / 功能

Command / 命令Description / 说明
baidu_searchBaidu web search / 百度网页搜索
baidu_directionBaidu Map route planning / 百度地图路线规划
baidu_nearbyNearby place recommendation / 附近场所推荐

Configuration / 配置

Set Baidu API Key (required for LBS location services) / 设置百度 API Key(LBS 位置服务需要):

export BAIDU_API_KEY="your_baidu_ak"

How to get AK / 获取 AK:

  1. Visit https://lbsyun.baidu.com/
  2. Register a developer account / 注册开发者账号
  3. Create an application to get AK / 创建应用获取 AK

Usage / 使用方法

Baidu Search / 百度搜索

python scripts/baidu_search.py "search_keywords" [result_count]

Route Planning / 路线规划

python scripts/baidu_direction.py "origin_address" "destination_address" [driving|riding|walking|transit]

Nearby Place Recommendation / 附近场所推荐

python scripts/baidu_nearby.py "location" [category] [radius_meters] [count]

Supported Categories / 支持的类别:

  • 餐饮/美食/餐厅 — Food & Dining
  • 娱乐/休闲 — Entertainment & Leisure
  • 景点/旅游/景区 — Attractions & Tourism
  • 酒店/住宿 — Hotels & Accommodation
  • 购物/商场/超市 — Shopping & Malls
  • 交通/地铁/公交 — Transportation

Examples / 示例:

# Search for food near Sanlitun / 搜索三里屯附近美食
python scripts/baidu_nearby.py "Sanlitun, Chaoyang District, Beijing" 餐饮 1000 5

# Search for attractions near Tiananmen / 搜索天安门附近景点
python scripts/baidu_nearby.py "Tiananmen" 景点 5000 10

# Search using coordinates / 使用坐标搜索
python scripts/baidu_nearby.py "39.9,116.4" 娱乐

Dependencies / 依赖

Pure Python standard library, no additional dependencies. / 纯 Python 标准库实现,无需额外依赖。

Security Notes / 安全说明

  • Uses system default SSL certificate verification / 使用系统默认 SSL 证书验证
  • Input parameters are validated and sanitized / 输入参数已做验证和清理
  • Only HTTP/HTTPS protocols supported / 仅支持 HTTP/HTTPS 协议

Files

5 total
Select a file
Select a file to preview.

Comments

Loading comments…