baidu-search-CLI

Use Baidu AI Search Engine (BDSE) for web search. This version does not require Python installation

Security Scan

The skill's requirements and instructions are consistent with a simple CLI wrapper for Baidu AI Search and ask only for a Baidu API key; the only issues are small documentation/instruction inconsistencies and the skill's unknown origin.

Purpose & Capability

Name, description, required binary (shell) and the single required env var (BAIDU_API_KEY) match the stated purpose of performing web searches against Baidu's AI search API via curl; no unrelated credentials or binaries are requested.

Instruction Scope

SKILL.md confines actions to performing a curl POST to the Baidu endpoint using the provided search_request.json. However the example curl uses a literal header 'Authorization: Bearer apikey' instead of demonstrating substitution of the BAIDU_API_KEY environment variable, which is an inconsistency that could lead to misconfiguration or accidental disclosure when users copy-paste. The instructions do not ask to read unrelated files or exfiltrate other data.

Install Mechanism

Instruction-only skill with no install spec and no code files — low install risk because nothing is written to disk by the skill bundle itself.

Credentials

Only BAIDU_API_KEY is required, which is proportionate to the declared purpose. No other secrets or config paths are requested.

Persistence & Privilege

Skill is not always-on and does not request persistent/privileged agent presence or modify other skills; normal invocation model applies.

Assessment

This skill appears to do what it says: run a curl POST to Baidu's AI search endpoint using BAIDU_API_KEY. Before installing: (1) note the package has no known homepage or author info — decide if you trust the unvetted source; (2) update the example curl to use your key (Authorization: Bearer $BAIDU_API_KEY) rather than the literal 'apikey' shown, and avoid pasting your real key into public examples; (3) review search_request.json to ensure queries don't contain sensitive data you wouldn't want sent to the search provider; (4) confirm the endpoint (https://qianfan.baidubce.com) is the expected Baidu service for your region. If you need higher assurance, ask the publisher for source or a verified homepage before use.

Baidu Search

通过百度AI搜索API搜索网络，但不需要安装python,直接改用CLI

Usage

1.curl命令，发送的post json请参考当前目录下的search_request.json文件
2.用户的系统如果是windows请用cmd执行curl命令，不要用PowerShell
3.如果环境变量BAIDU_API_KEY不存在，返回信息:没有获取到环境变量BAIDU_API_KEY，请搜索如何获取BAIDU_API_KEY
4.如果环境变量BAIDU_API_KEY存在但curl返回身份验证错误,返回信息:APIKEY验证失败，请检查你的环境APIKEY是否设置正确

curl -X POST -H "Authorization: Bearer apikey" -H "X-Appbuilder-From: openclaw" -H "Content-Type: application/json" -d "@search_request.json" "https://qianfan.baidubce.com/v2/ai_search/web_search"

Request Param

apikey desc:从环境变量BAIDU_API_KEY中获取apikey
下面几个参数是search_request.json的字段说明
content:string desc:Search query
top_k:int desc:返回的数据条数，默认为10条，最多50条
gte:string desc:消息的开始时间，格式为"YYYY-MM-DD"
lt:string desc:消息的结束时间，格式为"YYYY-MM-DD"