Dify Knowledge Base Search
Analysis
The skill appears to do what it says: use a Dify API key to list and search Dify knowledge bases for RAG context.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Checks for instructions or behavior that redirect the agent, misuse tools, execute unexpected code, cascade across systems, exploit user trust, or continue outside the intended task.
[1] node | package: requests
The skill depends on the Python requests package without a pinned version. This is common and purpose-aligned, but the exact installed package version is not fixed by the artifact.
Checks whether tool use, credentials, dependencies, identity, account access, or inter-agent boundaries are broader than the stated purpose.
api_key = os.environ.get("DIFY_API_KEY") ... "Authorization": f"Bearer {api_key}"The script uses the configured Dify API key as a bearer token to access Dify datasets. This is expected for the skill, but the key's permissions define how much knowledge-base data the skill can read.
Checks for exposed credentials, poisoned memory or context, unclear communication boundaries, or sensitive data that could leave the user's control.
context = "\n".join([r["content"] for r in results["results"]])
final_prompt = f"Answer based on context:\n\n{context}\n\nQuestion: {query}"The documentation explicitly recommends using retrieved dataset content as model context. This is the intended RAG behavior, but retrieved text can influence answers and may contain sensitive or untrusted material.