heimaosearch

v1.0.1

用于搜索活动策划、方案、资源及案例的工具,与公关、活动有关的内容都可以使用。

0· 111·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, skill.json and SKILL.md all describe a search tool for event planning and the only requested inputs are account and open_api_key for the heimaohui API — these are proportionate to the claimed purpose.
Instruction Scope
SKILL.md instructs sending the user's query plus the provided account and key to a single external API and formatting the returned JSON. It does not direct reading unrelated files, system env vars, or other credentials.
Install Mechanism
No install spec or code files — instruction-only skill (no code written to disk). This is the lowest-risk install profile.
Credentials
The skill asks only for a service account and an API key for api.heimaohui.com. Those credentials are expected and justified for this integration; no unrelated secrets are requested.
Persistence & Privilege
always is false and the skill does not request persistent system-wide privileges or modify other skills. Autonomous invocation is allowed by default but not combined with other concerning factors.
Assessment
This skill is internally consistent, but it will transmit the account and API key you supply to https://api.heimaohui.com. Only provide a key you trust the service with (preferably a limited-scope or test key), review Heimaohui's privacy/security policies if needed, and rotate/revoke the key if you stop using the skill. Avoid supplying unrelated or high-privilege credentials, and validate returned links before visiting external URLs.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fmrbctva2vk76t2kav4grhx83j7ew

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments