Baidu Search 1.1.0

Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.

Security Scan

The skill appears to implement a simple Baidu web-search wrapper and its requirements (python3 + BAIDU_API_KEY) are coherent with its purpose; no obvious exfiltration or unrelated privileges were found, though there are minor packaging/metadata and dependency declaration issues to check before installing.

Purpose & Capability

Name/description, declared env var (BAIDU_API_KEY) and the included script align with a Baidu search integration. Minor inconsistencies in metadata: top-level registry metadata and the _meta.json ownerId/version/slug differ (registry lists slug 'baidu-search-1-1-0' and version 1.0.0, while _meta.json has slug 'baidu-search' and version 1.1.0 and a different ownerId). This is a packaging/metadata mismatch worth verifying but does not indicate malicious behavior.

Instruction Scope

SKILL.md instructs running scripts/search.py with a JSON request; the script reads only the provided JSON and BAIDU_API_KEY env var and posts to a Baidu endpoint. It does not access other system files or unrelated env vars. One practical omission: the script imports the Python 'requests' library but the skill does not declare that dependency in SKILL.md or requires; ensure 'requests' will be available in the runtime environment.

Install Mechanism

No install spec (instruction-only plus bundled script). Nothing is downloaded or executed at install time; this is low-risk from an install mechanism perspective.

Credentials

Only BAIDU_API_KEY is required and is used as the Authorization bearer token to call the Baidu AI Search endpoint. That single credential is proportionate to the declared purpose.

Persistence & Privilege

always is false and the skill does not request persistent system-wide privileges or modify other skills. Agent autonomous invocation is allowed by default but is not combined with elevated privileges here.

Assessment

This skill appears to do what it says: send search queries to a Baidu AI search endpoint using the BAIDU_API_KEY. Before installing: 1) Confirm the BAIDU_API_KEY is the only credential you are comfortable providing and avoid sending sensitive secrets in queries (queries are transmitted to Baidu). 2) Ensure the runtime has the Python 'requests' package installed or add it to your environment. 3) Verify the odd metadata mismatches (ownerId, slug, version) — confirm the publisher/source to ensure you trust the package origin. 4) If you need stronger privacy guarantees, review the endpoint (https://qianfan.baidubce.com) and the provider's data-handling policies.

Baidu Search

Search the web via Baidu AI Search API.

Usage

python3 skills/baidu-search/scripts/search.py '<JSON>'

Request Parameters

Param	Type	Required	Default	Description
query	str	yes	-	Search query
edition	str	no	standard	standard (full) or lite (light)
resource_type_filter	list[obj]	no	web:20, others:0	Resource types: web (max 50), video (max 10), image (max 30), aladdin (max 5)
search_filter	obj	no	-	Advanced filters (see below)
block_websites	list[str]	no	-	Sites to block, e.g. ["tieba.baidu.com"]
search_recency_filter	str	no	-	Time filter: week, month, semiyear, year
safe_search	bool	no	false	Enable strict content filtering

SearchFilter

Param	Type	Description
match.site	list[str]	Limit search to specific sites, e.g. ["baike.baidu.com"]
range.pageTime	obj	Date range for page_time field (see below)

Date Range Format

Fixed date: YYYY-MM-DD Relative time (from current day): now-1w/d, now-1M/d, now-1y/d

Operator	Meaning
gte	Greater or equal (start)
lte	Less or equal (end)

Examples

# Basic search
python3 skills/baidu-search/scripts/search.py '{"query":"人工智能"}'

# Filter by time and site
python3 skills/baidu-search/scripts/search.py '{
  "query":"最新新闻",
  "search_recency_filter":"week",
  "search_filter":{"match":{"site":["news.baidu.com"]}}
}'

# Resource type filter
python3 skills/baidu-search/scripts/search.py '{
  "query":"旅游景点",
  "resource_type_filter":[{"type":"web","top_k":20},{"type":"video","top_k":5}]
}'

Current Status

Fully functional.