UniFuncs Deep Search

使用 UniFuncs API 进行深度搜索，高速全面地搜索信息。当用户需要深度搜索、深搜、全面信息收集时使用。

Security Scan

The skill's claimed purpose (deep search via UniFuncs) matches its code and instructions, but the package metadata omits the required API credential and the source/homepage are missing — an incoherence that merits caution.

Purpose & Capability

The skill is a wrapper around UniFuncs' deep-search API and legitimately needs an API key and curl; that matches the stated purpose. However, the registry metadata lists no required environment variables or primary credential even though SKILL.md and the script require UNIFUNCS_API_KEY — a metadata/instruction mismatch.

Instruction Scope

Runtime instructions and the included script only perform a POST to https://api.unifuncs.com/deepsearch/v1/chat/completions with the user's query and the UNIFUNCS_API_KEY. They do not instruct reading unrelated files or exfiltrating system data. The script does interpolate the raw query into JSON without escaping, which is a minor safety/robustness concern but not scope creep.

Install Mechanism

No install spec — instruction-only plus a small shell script. No external downloads or package installs are performed. Low install risk.

Credentials

Only a single API key (UNIFUNCS_API_KEY) is needed and is proportionate to the task. The concern is that the skill metadata did not declare this required environment variable or a primary credential, which could lead to unclear UX and accidental mishandling of secrets. Also the package has no homepage or publisher info (source unknown), so handing over an API key has additional trust implications.

Persistence & Privilege

The skill does not request persistent presence (always:false), does not modify other skills or system settings, and does not write files beyond its included script. Normal privilege level for a network-calling skill.

What to consider before installing

This skill appears to do what it says (call UniFuncs deep search) but the registry metadata fails to declare the required UNIFUNCS_API_KEY — you must set that env var manually. Before installing: verify the UniFuncs service and domain (no homepage or publisher info is provided), confirm you trust the provider before giving an API key, and prefer using a restricted key. Note the included shell script interpolates the query directly into JSON (no escaping), so avoid passing untrusted input to the script. If you need stronger assurance, ask the publisher for provenance (homepage, owner contact) or prefer an officially documented integration.

UniFuncs 深度搜索 Skill

高速、准确、全面的深度搜索能力。

首次使用配置

1. 前往 https://unifuncs.com/account 获取 API Key
2. 设置环境变量：export UNIFUNCS_API_KEY="sk-your-api-key"

使用方法

执行深度搜索：

curl -X POST "https://api.unifuncs.com/deepsearch/v1/chat/completions" \
  -H "Authorization: Bearer $UNIFUNCS_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"model": "s2", "messages": [{"role": "user", "content": "$ARGUMENTS"}]}'

参数说明

参数	说明	默认值
messages	搜索问题	必填
model	s2 或 s1	s2

更多信息

• 详细 API 文档见 api.md