Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Baidu Scholar Search Skill 1.1.0

v1.0.0

Baidu Scholar Search - Search Chinese and English academic literature (journals, conferences, papers, etc.)

0· 258·2 current·3 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lean-zhouchao/baidu-scholar-search-skill-1-1-0.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Baidu Scholar Search Skill 1.1.0" (lean-zhouchao/baidu-scholar-search-skill-1-1-0) from ClawHub.
Skill page: https://clawhub.ai/lean-zhouchao/baidu-scholar-search-skill-1-1-0
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: BAIDU_API_KEY
Required binaries: curl
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install baidu-scholar-search-skill-1-1-0

ClawHub CLI

Package manager switcher

npx clawhub@latest install baidu-scholar-search-skill-1-1-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, required binary (curl), declared env var (BAIDU_API_KEY), SKILL.md endpoint, and the included bash script all align with a search wrapper for Baidu Scholar. Nothing requested appears unrelated to the stated purpose.
Instruction Scope
Runtime instructions and the bash script stay within the search scope (they send the keyword/page/abstract flags to the Baidu endpoint). Minor implementation issues: the script inserts the keyword into the URL without URL-encoding or sanitization, which may cause broken requests or unexpected encoding and could alter queries sent to the remote endpoint. The script also adds a custom header (X-Appbuilder-From: openclaw) which leaks that the request originated from this skill.
Install Mechanism
Instruction-only with a small bash script and no install spec — lowest-risk class. No downloads or archives; nothing is written to disk beyond the included script.
Credentials
Requesting a single BAIDU_API_KEY is proportionate to calling the Baidu API. The skill will send that key in an Authorization: Bearer header to qianfan.baidubce.com (the declared endpoint), so protect the key as it is transmitted to a third party. No other credentials or unrelated env vars are requested.
Persistence & Privilege
always is false and the skill does not request persistent or system-wide privileges. It does not modify other skills or agent configs.
Assessment
This skill appears to do what it says: it sends your search terms (and optionally requested abstracts) to a Baidu endpoint using the BAIDU_API_KEY you provide. Before installing: 1) Confirm you trust the endpoint (qianfan.baidubce.com) and that your BAIDU_API_KEY has only the permissions it needs; 2) Be aware that search queries and any requested abstracts are transmitted to Baidu — avoid sending sensitive or private text; 3) Consider URL-encoding user-supplied keywords (the included script does not) to avoid malformed requests or accidental leakage of special characters; 4) Note metadata inconsistencies in owner/version fields in the package files — verify the publisher if provenance matters; 5) Protect the BAIDU_API_KEY (use least-privileged keys and rotate if compromised). If you need stronger guarantees about input handling or privacy, request a version that URL-encodes inputs and documents the exact API behavior and data retention policy.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🔬 Clawdis
Binscurl
EnvBAIDU_API_KEY
Primary envBAIDU_API_KEY
latestvk97771096pcewjw4n8724kq8t1833mze
258downloads
0stars
1versions
Updated 23h ago
v1.0.0
MIT-0

Baidu Scholar Search Skill

Features

Search Chinese and English academic literature by keyword, including journal papers, conference papers, dissertations, etc.

LLM Usage Guide

Basic Usage

bash baidu_scholar_search.sh "keyword"
bash baidu_scholar_search.sh "keyword" page_number
bash baidu_scholar_search.sh "keyword" page_number include_abstract

Parameter Description

ParameterRequiredDefaultDescription
keyword-Search term, e.g., "machine learning" or "cancer immunotherapy"
page_number0Starts from 0, 0=first page, 1=second page
include_abstractfalsetrue=return detailed abstract, false=return only title and basic info

Default Behavior

  • No abstract returned - Fast response, suitable for quickly browsing literature lists
  • Start from page 1

When to Return Abstract

  • User explicitly requests "abstract", "include abstract", "detailed content"
  • User says "I need to understand the paper content", "give me detailed explanation"

When NOT to Return Abstract

  • User only says "search", "retrieve", "check"
  • User says "see what's available", "help me find"
  • No explicit request for abstract information

API Specification

Endpoint

GET https://qianfan.baidubce.com/v2/tools/baidu_scholar/search

Request Parameters

  • wd - Search keyword (required)
  • pageNum - Page number (optional, default 0)
  • enable_abstract - Whether to return abstract (optional, default false)

Response Fields

  • title - Paper title
  • abstract - Abstract (only returned when enable_abstract=true)
  • keyword - Keywords
  • paperId - Paper ID
  • publishYear - Publication year
  • url - Baidu Scholar link

Examples

Quick Search (No Abstract)

bash baidu_scholar_search.sh "cancer immunotherapy"
# Returns title, year, keywords and other basic information

Detailed Search (With Abstract)

bash baidu_scholar_search.sh "cancer immunotherapy" 0 true
# Returns detailed information including abstract

Pagination Search

bash baidu_scholar_search.sh "machine learning" 1
# Search page 2 (no abstract)

Notes

  • Need to set BAIDU_API_KEY environment variable
  • Keywords must be wrapped in quotes
  • Returning abstract significantly increases response time
  • Both Chinese and English keywords are supported

Comments

Loading comments...