by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it says: call Baidu's AI search API using your BAIDU_API_KEY. Before installing: (1) verify you have python3 and install the requests package (pip install requests) so the script can run; (2) consider whether you want the API key stored in ~/.openclaw/openclaw.json (plaintext) or prefer to set BAIDU_API_KEY in a secure environment/secret manager; (3) confirm the HTTP endpoint (https://qianfan.baidubce.com) matches the Baidu service you expect; (4) test the skill in ...详细分析 ▾
✓ 用途与能力
Name, description, and code implement a Baidu AI web search. Requested items (python3 and BAIDU_API_KEY) match the stated purpose. Minor note: the included script uses the Python 'requests' library but the skill metadata does not declare that dependency.
ℹ 指令范围
Runtime instructions only run the included Python script with a JSON argument and tell the user how to configure BAIDU_API_KEY. The documentation suggests placing the API key in ~/.openclaw/openclaw.json (a local config)—this is reasonable for setup but is a scope note because it instructs modifying a user config file and storing the key in plaintext.
✓ 安装机制
No install spec (instruction-only) — lowest risk. Note: the script requires the 'requests' Python package but no installation steps are provided; users may need to pip install requests before running.
✓ 凭证需求
Only a single credential (BAIDU_API_KEY) is required and it is the primary credential for contacting Baidu's API. This is proportionate. Reminder: storing the key in plaintext inside ~/.openclaw/openclaw.json is convenient but reduces secrecy.
✓ 持久化与权限
The skill does not request persistent or elevated platform privileges (always:false). It does not try to modify other skills or system-wide settings beyond recommending editing the OpenClaw config for the API key.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/27
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install baidu-search-bak
镜像加速npx clawhub@latest install baidu-search-bak --registry https://cn.longxiaskill.com