Security audit

Baidu Search

Security checks across malware telemetry and agentic risk

Overview

This is a straightforward Baidu web-search skill, but users should treat searches and the Baidu API key as sensitive.

Install only if you are comfortable sending search queries to Baidu's service. Avoid searching for secrets, credentials, private customer data, or confidential internal material, and protect BAIDU_API_KEY by keeping the OpenClaw config out of version control and rotating the key if it may have been exposed.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (2)

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill documentation says it searches via Baidu AI Search API, but it does not give a clear user-facing privacy warning that user queries will be transmitted to a third-party external service. Users may submit sensitive prompts, internal project names, credentials, or personal data without realizing that information leaves the local environment.

Missing User Warnings

Medium

Confidence: 94% confidence
Finding: The guide instructs users to store a live API key directly in a plaintext local configuration file, but it does not mention file permissions, secret handling, redaction, or alternatives such as environment-variable injection or secret stores. This increases the risk of credential exposure through backups, screenshots, shell history, shared home directories, or accidental commit/sync of the config file.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.