采招网招标查询

• Risk level: Low
• Analyzed: Apr 16, 2026, 10:59 AM
• Findings: 0
• Version: 1.0.1

Overview

The skill's code and instructions match its stated purpose (querying bidcenter.com.cn), it requires no credentials or installs, and its network calls are limited to the declared API endpoint.

This skill appears coherent and limited to querying bidcenter.com's public interface: it makes POST requests to the declared API and uses an embedded AES key to decrypt responses. It does not request any secrets or install additional software. Consider that (1) the embedded decryption key/IV are necessary to parse the provider's encrypted responses — this is normal but means the code contains static crypto material; (2) the remote API may change, be rate-limited, or require paid VIP access for some data; and (3) the skill relies on fetch being available in the runtime environment. If you need guaranteed uptime or access to paid data, verify with the data provider or use an official API key/service instead.