← Back to Skills Marketplace
hulinying

ZhiPu Search

by kevin · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
303
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install zhipu-ai-search
Description
智谱搜索,调用智谱 Web Search API,支持多引擎(智谱标准/高阶/搜狗/夸克),返回结构化结果,适合大模型处理。
Usage Guidance
This skill appears to do what it says (call Zhipu web_search with an API key), but review the following before installing: - The SKILL.md message 'do not read/output/modify config.json' contradicts the script, which will read ../config.json if ZHIPU_API_KEY is not set. Confirm whether you want the key in an env var only, or allow a local config.json file. If you keep a config.json, store it outside version control and restrict filesystem permissions. - The script calls open.bigmodel.cn over HTTPS; ensure you trust that endpoint and the API key provider. Keep your ZHIPU_API_KEY secret and do not paste it into public repos or logs. - The SKILL.md and code have a small path mismatch (SKILL.md mentions /paas/v4/web_search while the code posts to /api/paas/v4/web_search). This is likely benign but worth verifying against provider docs/test calls. - If you require stronger guarantees that the key will not be read from disk, modify the script to refuse falling back to config.json. If you are not comfortable with the config.json fallback, run the script in an environment where ZHIPU_API_KEY is set and no config.json is present, or edit the script to remove the fallback. Reviewing the code is straightforward (it's short) and recommended before use.
Capability Analysis
Type: OpenClaw Skill Name: zhipu-ai-search Version: 1.0.0 The skill is a legitimate implementation for interacting with the Zhipu AI Web Search API. The Node.js script (scripts/search.js) uses standard libraries to perform authenticated HTTPS requests to the official endpoint (open.bigmodel.cn) and includes safety instructions in SKILL.md to prevent the AI agent from leaking sensitive API keys.
Capability Assessment
Purpose & Capability
Name/description, required environment variable (ZHIPU_API_KEY in _meta.json), and the included script all align: this skill exists to call Zhipu's web_search API and only requires the provider API key. No unrelated binaries, credentials, or config paths are requested.
Instruction Scope
SKILL.md contains conflicting guidance: it documents config.json as an alternate way to supply the API key, but also states (in Chinese) 'config.json contains sensitive information, do not read, output, or modify'. Meanwhile scripts/search.js will read config.json (../config.json) if the ZHIPU_API_KEY env var is not present. This contradiction could lead to accidental leakage or misunderstood expectations about where the key is stored and who/what may read it.
Install Mechanism
No install spec is provided (instruction-only with an included script). Nothing is downloaded or written during installation. This is the lowest-risk install model.
Credentials
Only one credential is required (ZHIPU_API_KEY), declared in _meta.json as primaryEnv; that is proportionate and expected for a web-search API client. The script reads the env var at runtime (or falls back to a local config.json).
Persistence & Privilege
The skill does not request permanent/always-enabled presence (always:false). It does not modify other skills or system-wide settings. Autonomous invocation remains enabled by default but is normal for skills.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install zhipu-ai-search
  3. After installation, invoke the skill by name or use /zhipu-ai-search
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
- Major update: Migrated from Bash scripts to Node.js for improved flexibility and multi-engine support. - Added Node.js search script (`scripts/search.js`) with structured JSON output. - Support for multiple search engines (Zhipu standard/pro, Sogou, Quark), adjustable parameters (count, engine, freshness, content size, domain). - Configurable via environment variable or JSON config file (with enhanced security guidance). - Improved and clarified documentation with full usage examples, output format, and error codes. - Removed shell scripts and legacy metadata for a streamlined, code-centric setup.
Metadata
Slug zhipu-ai-search
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is ZhiPu Search?

智谱搜索,调用智谱 Web Search API,支持多引擎(智谱标准/高阶/搜狗/夸克),返回结构化结果,适合大模型处理。 It is an AI Agent Skill for Claude Code / OpenClaw, with 303 downloads so far.

How do I install ZhiPu Search?

Run "/install zhipu-ai-search" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is ZhiPu Search free?

Yes, ZhiPu Search is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does ZhiPu Search support?

ZhiPu Search is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created ZhiPu Search?

It is built and maintained by kevin (@hulinying); the current version is v1.0.0.

💬 Comments