Tianshu Baidu Search
Search the web using Baidu AI Search Engine (BDSE). Use for live information, documentation, or research topics.
MIT-0 · Free to use, modify, and redistribute. No attribution required.
⭐ 0 · 24 · 0 current installs · 0 all-time installs
bytianshu@wangshengli0421
MIT-0
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description state a Baidu AI web search; the only required credential is BAIDU_API_KEY and the code posts queries to Baidu's qianfan.baidubce.com endpoint. Requested capabilities map to the stated purpose.
Instruction Scope
SKILL.md instructs running the included Node.js script with a JSON argument. The script sends search requests only to the Baidu AI Search endpoint, removes snippet text from returned references, and prints the references. It does not read unrelated files or exfiltrate data to other endpoints.
Install Mechanism
No install spec (instruction-only) and package.json has no dependencies, which is low risk. Minor inconsistency: the skill is a Node.js script and SKILL.md shows Node usage, but the registry metadata does not declare Node or any required binary; the runtime will need Node present for the script to run.
Credentials
Only BAIDU_API_KEY is required and used to authorize requests to Baidu. That single credential is proportional and declared as the primaryEnv; the code does not access other environment variables or secrets.
Persistence & Privilege
No elevated persistence requested (always:false). The skill is user-invocable and may be invoked autonomously (platform default) but it does not request system-wide configuration changes or cross-skill modifications.
Assessment
This skill appears coherent and implements a straightforward Baidu web search. Before installing: ensure your agent environment has Node.js available (the metadata doesn't declare it); only provide a Baidu API key you trust for search use (avoid sharing high-privilege keys); be aware that queries and results are sent to Baidu's API (do not send sensitive secrets in queries); review the script if you need to change how results are filtered or logged; rotate/revoke the API key if you stop using the skill.scripts/search.js:8
Environment variable access combined with network send.
Confirmed safe by external scanners
Static analysis detected API credential-access patterns, but both VirusTotal and OpenClaw confirmed this skill is safe. These patterns are common in legitimate API integration skills.Like a lobster shell, security has layers — review code before you run it.
Current versionv1.0.0
Download ziplatest
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvBAIDU_API_KEY
Primary envBAIDU_API_KEY
SKILL.md
百度搜索 (tianshu-baidu-search)
使用百度 AI 搜索 API 进行网页搜索,Node.js 实现,无需 Python。
前置配置
BAIDU_API_KEY- 从 https://console.bce.baidu.com/ai-search/qianfan/ais/console/apiKey 获取
用法
node scripts/search.js '{"query":"人工智能"}'
node scripts/search.js '{"query":"最新新闻","freshness":"pd","count":20}'
参数
| 参数 | 类型 | 必填 | 默认 | 说明 |
|---|---|---|---|---|
| query | string | 是 | - | 搜索关键词 |
| count | int | 否 | 10 | 返回数量,1-50 |
| freshness | string | 否 | - | pd=24h, pw=7天, pm=31天, py=365天,或 YYYY-MM-DDtoYYYY-MM-DD |
Files
4 totalSelect a file
Select a file to preview.
Comments
Loading comments…
