Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Baidu web search helper that sends the user's search query to Baidu using a disclosed API key.
Install this only if you are comfortable sending search queries to Baidu's Qianfan AI Search API and providing a BAIDU_API_KEY in the environment. Avoid using it for sensitive queries unless that is acceptable under your Baidu account and data-handling expectations.
The skill declares access to an environment variable and uses network-capable code, but it does not explicitly constrain tool scope with permissions or allowed-tools. This creates an authorization gap where the runtime may grant broader capabilities than reviewers or users expect, increasing the risk of secret exposure or unintended outbound requests if the implementation changes or is abused.
The file’s user-facing description and usage examples are entirely in Chinese, including the stated purpose and required JSON fields, with no indication that other languages are supported. This creates a language/locale constraint in natural-language guidance without user opt-in or justification.
Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.
};
async function main() {
const res = await fetch('https://qianfan.baidubce.com/v2/ai_search/web_search', {
method: 'POST',
headers: {
Authorization: `Bearer ${apiKey}`,
The natural-language metadata prominently presents the skill as "百度 AI 搜索" / Baidu search and does not indicate any user language or locale choice. This can be read as a locale-specific constraint without an explicit opt-in or justification in the manifest text.
No suspicious patterns detected.