baidu scholar search

Baidu Academic Search Tool enables the retrieval of both Chinese and English literature, covering various types of literature such as academic journals, conference papers, and dissertations.

Security Scan

The skill appears to do what it claims (call a Baidu Scholar search API via curl) but there are minor metadata/instruction inconsistencies you should verify before installing.

Purpose & Capability

The skill's code and SKILL.md implement a simple Baidu Scholar search (curl to a Baidu endpoint) which matches the name/description. However the registry metadata claims no required environment variables while the SKILL.md and included script require BAIDU_API_KEY — this mismatch should be corrected.

Instruction Scope

Runtime instructions and the provided shell script are narrowly scoped: they read BAIDU_API_KEY and call the documented Baidu endpoint with wd, pageNum, and enable_abstract parameters. There are no instructions to read unrelated files, other env vars, or exfiltrate data elsewhere.

Install Mechanism

No install spec and only a small shell script are included. Nothing is downloaded or extracted from third-party URLs; risk from installation is low.

Credentials

Requesting a single API key (BAIDU_API_KEY) is proportionate for an API-backed search tool, but the skill registry does not list this required env var (inconsistent). The script only uses that one credential.

Persistence & Privilege

The skill does not request persistent/system-wide privileges; always is false and there is no behavior that modifies other skills or system configs.

Assessment

This skill is small and mostly coherent, but check a few things before installing: (1) Confirm the BAIDU_API_KEY requirement — the registry metadata omits it even though the script and SKILL.md require it. (2) Verify the endpoint (https://qianfan.baidubce.com) is the legitimate Baidu-hosted API you expect and that the API key you provide is scoped and minimal (read-only, limited quota) and rotated if shared. (3) Inspect or test the included shell script in a safe environment: it does not URL-encode the user-supplied wd parameter (may produce malformed queries); ensure you won't pass untrusted input that could lead to unexpected server requests. (4) Because the skill owner is unknown, prefer using a restricted API key and monitor usage after enabling the skill. If you need higher assurance, ask the publisher to correct the metadata to declare BAIDU_API_KEY explicitly and provide a link to official API docs or source repository.

Based on the keywords entered by the user, search for both Chinese and English literature, covering various types of literature such as academic journals, conference papers, and dissertations

Setup

1. API Key: Ensure the BAIDU_API_KEY environment variable is set with your valid API key.
2. Environment: The API key should be available in the runtime environment.

API table

name	path	description
scholar_search	/v2/tools/baidu_scholar/search	Based on the keywords entered, search for both Chinese and English literature

Workflow

1. The script makes a GET request to the Baidu Scholar Search API
2. The API returns structured search results with abstract, keyword, paperId, title etc. about a list of literature

Scholar Search API

Parameters

• wd: The search keywords(required,e.g. 'machine learning')
• pageNum: page num (default: 0)
• enable_abstract: whether to enable abstract (default: false), if true return the abstract of the literature

Example Usage

curl -XGET 'https://qianfan.baidubce.com/v2/tools/baidu_scholar/search?wd=人工智能&enable_abstract=true' \
-H 'Authorization: Bearer API_KEY'

EXEC scripts

#!/bin/bash

# Baidu Scholar Search Skill Implementation

set -e

# Check if required environment variable is set
if [ -z "$BAIDU_API_KEY" ]; then
    echo '{"error": "BAIDU_API_KEY environment variable not set"}'
    exit 1
fi

WD="$1"
if [ -z "$wd" ]; then
    echo '{"error": "Missing wd parameter"}'
    exit 1
fi
pageNum="$2"
if [ -z "$pageNum" ]; then
    pageNum=0
fi
enable_abstract="$3"
if [ -z "$pageNum" ]; then
    enable_abstract=false
fi
curl -XGET "https://qianfan.baidubce.com/v2/tools/baidu_scholar/search?wd=$WD&pageNum=$pageNum&enable_abstract=$enable_abstract" -H "Authorization: Bearer $BAIDU_API_KEY"