Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Baidu Search Pro

v1.0.1

Compatibility entry for our in-house Baidu realtime search chain. Use for live information, documentation, or research topics.

1· 139·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description match required artifacts: the skill is an alias for a Baidu realtime search chain and declares BAIDU_API_KEY and Python as required. Requesting a Baidu API key is appropriate for a Baidu search integration.
Instruction Scope
SKILL.md instructions are narrowly scoped and match the alias behavior. However the included script uses runpy.run_path to execute a canonical script located at ../../..../custom-skills/realtime-web-search/scripts/search.py (outside the skill directory). That means this package simply forwards execution to code elsewhere on disk — review the target script before trusting the alias.
Install Mechanism
No install spec — instruction-only plus a tiny wrapper file. Nothing is downloaded or written by an installer.
Credentials
Only BAIDU_API_KEY is required (with optional endpoint overrides). The environment access requested is proportional to a web-search integration.
Persistence & Privilege
always:false and normal invocation settings. The skill does not request elevated persistence or alter other skills' configuration.
Assessment
This skill is a lightweight compatibility alias that simply runs the realtime-web-search script from a shared custom-skills directory. The BAIDU_API_KEY requirement is expected. Before installing, verify that the canonical script (custom-skills/realtime-web-search/scripts/search.py) is trustworthy and owned by a known maintainer, because this alias will execute that external script at runtime (supply-chain risk). Also note the _meta.json ownerId differs slightly from the registry ownerId — this may be benign (stale metadata) but is worth checking. If you don't have or don't trust the realtime-web-search implementation, prefer installing the real realtime-web-search skill directly or review its code and endpoints first.

Like a lobster shell, security has layers — review code before you run it.

latestvk978gc7bj0fpqh1ckkbf63hecs8347hb

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

🔍︎ Clawdis
Any binpython, python3, py
EnvBAIDU_API_KEY
Primary envBAIDU_API_KEY

SKILL.md

Baidu Search (compat alias)

Cross-platform Python: on Windows prefer py -3.11; on Linux/macOS prefer python3; if plain python already points to Python 3, it also works.

This skill is a backward-compatible alias for realtime-web-search. Use it only when an existing workflow still calls skills/baidu-search; new installs should prefer realtime-web-search directly.

What this alias keeps working

Both commands run the same canonical Baidu-based search chain:

py -3.11 skills/baidu-search/scripts/search.py '<JSON>'
py -3.11 skills/realtime-web-search/scripts/search.py '<JSON>'

Recommended modes

  • mode=auto (default): web_search -> chat -> web_summary
  • mode=search: web_search -> chat
  • mode=summary: web_summary only

Prefer mode=search for speed and stability.

Minimal request example

py -3.11 skills/baidu-search/scripts/search.py '{"query":"人工智能","mode":"search"}'

Required environment variable

  • BAIDU_API_KEY

Optional endpoint overrides

  • BAIDU_WEB_SEARCH_ENDPOINT
  • BAIDU_CHAT_SEARCH_ENDPOINT
  • BAIDU_SUMMARY_ENDPOINT

Files

3 total
Select a file
Select a file to preview.

Comments

Loading comments…