zhipu web search
v1.0.8Zhipu AI Web Search Tool - Provides flexible search engine capabilities directly via cURL. Use when: - Need to search web information for the latest data - N...
⭐ 6· 3.6k·13 current·13 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binary (curl), and required env var (ZHIPU_API_KEY) match the provided script and SKILL.md. The skill only calls a Zhipu web-search endpoint and does not request unrelated cloud credentials or system access. Minor metadata mismatch: registry lists version 1.0.8 while _meta.json contains 1.0.7 (likely a packaging/versioning oversight).
Instruction Scope
SKILL.md and the included shell script confine actions to building a JSON payload and POSTing it to https://open.bigmodel.cn/api/paas/v4/web_search. The instructions do not ask the agent to read arbitrary files, other env vars, or transmit results to unexpected endpoints. Note: the script performs basic escaping for backslashes and double quotes but does not escape newlines or other JSON-control characters, which may break some queries or change payloads; this is a robustness issue rather than incoherent scope.
Install Mechanism
No install spec — instruction-only plus a small shell script. Nothing is downloaded or written by an installer, so install risk is minimal.
Credentials
Only ZHIPU_API_KEY is required (declared), which is proportional for a wrapper that calls Zhipu's API. No unrelated secrets or multiple external credentials are requested. (The metadata omits a 'primaryEnv' entry but that does not create an incoherence.)
Persistence & Privilege
The skill does not request permanent/always-enabled presence and does not modify system or other-skills configuration. Agent autonomy settings are default; no extra privileges are requested.
Assessment
This skill is a simple wrapper that sends your query to Zhipu's web_search API using the ZHIPU_API_KEY. Before installing: (1) confirm you intend to use https://open.bigmodel.cn as the search provider; (2) keep your ZHIPU_API_KEY private and monitor its usage (it grants API access and could incur charges); (3) be aware the included script only escapes quotes/backslashes — queries with newlines or other special characters might be malformed, so inspect or harden the JSON construction if you expect arbitrary input; and (4) the version noted in _meta.json differs from the registry metadata (likely benign but worth noting).Like a lobster shell, security has layers — review code before you run it.
latestvk97029rqyg2efpy066hrsd0t7182v10j
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binscurl
EnvZHIPU_API_KEY