Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Baidu Web Search

v2.1.2

Perform web searches using Baidu API with a focus on Chinese content, customizable result counts, and easy OpenClaw integration.

0· 202·0 current·0 all-time
byClawMem.com@leohuang8688

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for leohuang8688/bidu-search.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Baidu Web Search" (leohuang8688/bidu-search) from ClawHub.
Skill page: https://clawhub.ai/leohuang8688/bidu-search
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install bidu-search

ClawHub CLI

Package manager switcher

npx clawhub@latest install bidu-search
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
Name/description match the code: the Python client calls a Baidu Search API and returns results. However, the registry metadata declares no required environment variables or primary credential while SKILL.md and the code both require BAIDU_API_KEY. That mismatch is incoherent: a search skill should declare the API key as a required credential in the metadata.
Instruction Scope
Runtime instructions and code are narrowly scoped to making HTTP requests to a Baidu API and formatting results. The code loads an .env file from the repository/workspace root (Path(__file__).parent.parent / '.env'), which means it can pick up any other secrets stored in that workspace .env unexpectedly. The HTTP outbound traffic appears only to the Baidu API host in the code (no other hidden endpoints).
Install Mechanism
No automated install script is present (instruction-only install). A requirements.txt lists only requests and python-dotenv — standard and proportionate. There are no downloads from arbitrary URLs or extract steps.
!
Credentials
Functionally the skill only needs a single API key (BAIDU_API_KEY), which is proportionate. But the registry metadata incorrectly lists no required env vars/primary credential, while SKILL.md and code require BAIDU_API_KEY. Additionally, auto-loading a workspace .env risks picking up unrelated secrets present in the environment, which increases the blast radius.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent settings. It runs on demand and has no elevated persistence privileges.
What to consider before installing
This skill appears to be a straightforward Baidu search client, but there are two issues you should address before installing: (1) the registry metadata incorrectly omits the required BAIDU_API_KEY — ask the author to declare this credential in the metadata so you know what will be requested; (2) the code auto-loads a .env file from the workspace root, which could cause the skill to read other secrets if a .env exists there. If you proceed, run it in an isolated environment, ensure your workspace .env contains only the Baidu API key (or avoid a shared .env entirely by exporting BAIDU_API_KEY explicitly), and review the code yourself. If you cannot verify the author or update the metadata, treat the package as untrusted and test in a sandboxed container. If you want higher assurance, request the author to remove workspace-wide dotenv loading or to explicitly document and minimize what the .env must contain.

Like a lobster shell, security has layers — review code before you run it.

latestvk978j2p2903crb41ywnz273a6h834mz6
202downloads
0stars
4versions
Updated 23h ago
v2.1.2
MIT-0

🔍 Baidu Web Search Skill

百度网页搜索技能 - 使用百度搜索 API 进行网络搜索


📋 Overview

PropertyValue
Namebaidu-web-search
Version1.0.0
AuthorPocketAI for Leo
LicenseMIT
CategorySearch
Required Env VarsBAIDU_API_KEY

🔐 Required Environment Variables

This skill requires the following environment variables:

VariableDescriptionRequiredHow to Get
BAIDU_API_KEYBaidu Search API key✅ Yeshttps://ai.baidu.com/

Configuration:

export BAIDU_API_KEY="your_baidu_api_key"

✨ Features

  • 🔍 Baidu Web Search - 使用百度搜索 API 进行网络搜索
  • 🇨🇳 Chinese Focus - 专注于中文搜索结果
  • 📊 Customizable Results - 可定制返回结果数量
  • 🚀 Easy Integration - 易于集成到 OpenClaw

✨ Features

  • 🔍 Baidu Web Search - 使用百度搜索 API 进行网络搜索
  • 🇨🇳 Chinese Focus - 专注于中文搜索结果
  • 📊 Customizable Results - 可定制返回结果数量
  • 🚀 Easy Integration - 易于集成到 OpenClaw

🚀 Quick Start

Installation

cd ~/.openclaw/workspace/skills
# Already installed at: baidu-web-search/

Configuration

Option 1: Using .env file (Recommended)

# Copy the example .env file
cp .env.example .env

# Edit .env and add your API key
nano .env  # or use your favorite editor

Option 2: Using environment variable

export BAIDU_API_KEY="your_baidu_api_key"

Basic Usage

from src.baidu_search import baidu_search

# Search with default 10 results
result = baidu_search("人工智能 2026")
print(result)

# Search with custom result count
result = baidu_search("新能源汽车", count=5)
print(result)

CLI Usage

# Search with default 10 results
python3 src/baidu_search.py "人工智能 2026"

# Search with custom result count
python3 src/baidu_search.py "新能源汽车" 5

📖 API Usage

Python API

from src.baidu_search import BaiduSearch, baidu_search

# Method 1: Simple search
result = baidu_search("OpenClaw AI", count=10)
print(result)

# Method 2: Using client
searcher = BaiduSearch(api_key="your_api_key")
results = searcher.search("OpenClaw", count=5)

for result in results:
    print(f"Title: {result['title']}")
    print(f"URL: {result['url']}")
    print(f"Snippet: {result['abstract']}\n")

⚙️ Configuration

Environment Variables

VariableDescriptionRequired
BAIDU_API_KEYBaidu Search API key✅ Yes

Getting Baidu API Key

  1. Visit Baidu AI Open Platform
  2. Create an account or login
  3. Go to Console → Applications
  4. Create a new application
  5. Get your API Key

📁 Project Structure

baidu-web-search/
├── src/
│   └── baidu_search.py     # Main search client
├── SKILL.md                 # This file
└── README.md                # Documentation

🎯 Use Cases

1. News Search

result = baidu_search("最新科技新闻 2026")

2. Research

result = baidu_search("人工智能 医疗 应用")

3. Product Search

result = baidu_search("智能手机 评测")

4. Local Search

result = baidu_search("北京 美食 推荐")

📝 Response Format

Search Result Structure

{
  "title": "网页标题",
  "url": "网页链接",
  "abstract": "摘要内容"
}

Example Output

🔍 Baidu Search Results for: 人工智能 2026

Found 10 results:

1. **2026 年人工智能发展趋势**
   URL: https://example.com/ai-trends-2026
   2026 年人工智能领域将呈现以下发展趋势...

2. **人工智能应用场景**
   URL: https://example.com/ai-applications
   人工智能在医疗、金融等领域的应用...

⚠️ Limitations

  • API Rate Limits: Baidu API has rate limits
  • API Key Required: Must have valid Baidu API key
  • Chinese Focus: Best for Chinese language queries
  • Regional Restrictions: May have regional restrictions

📞 Support


📄 License

MIT License - See LICENSE file for details.


Happy Searching! 🔍


Last Updated: 2026-03-17
Version: 1.0.0
Author: PocketAI for Leo

Comments

Loading comments...