Bailian Web Search Hardened

• Analyzed: May 3, 2026, 2:22 AM
• Findings: 1
• Version: 1.0.0
• Hash: 3e983891b999c23574e862b6692c021426820e5fc52e9b71b19db7d15db1cb6e
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a security-hardened implementation of a web search tool using the Alibaba Cloud Bailian API. It includes explicit defensive instructions in SKILL.md and SAFETY.md designed to prevent common AI agent risks such as API key leakage, private data exposure in search queries, and unauthorized data exfiltration via command piping. The core execution script, scripts/mcp-websearch.sh, is a transparent bash wrapper that uses curl and jq to interact with the official Alibaba endpoint (dashscope.aliyuncs.com) following the Model Context Protocol (MCP).