← Back to Skills Marketplace
warm-wm

volcengine-web-search

by volcengine_skills · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
871
Downloads
1
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install volcengine-web-search
Description
Using volcengine web_search.py script to search web and get the result, prepare clear and specific `query`.Run the script `python scripts/web_search.py "query"`. Organize the answer based on the returned summary list, do not add or guess content.
Usage Guidance
Before installing: review the scripts/web_search.py source to confirm exactly what it sends/receives and whether it logs or transmits any local data. Do not supply your VOLCENGINE_ACCESS_KEY/SECRET_KEY unless you trust the source; prefer creating a least-privilege API key for testing. Ask the publisher why the registry metadata omits required env vars and why the skill will use VeFaaS IAM credentials. If you want the model to require explicit permission before running networked code, set disableModelInvocation: true or avoid installing skills that can auto-run code with your credentials. If unsure, run the script in a sandboxed environment (isolated VM or container) and inspect network traffic first.
Capability Analysis
Type: OpenClaw Skill Name: volcengine-web-search Version: 1.0.0 The skill bundle is benign. The `SKILL.md` provides clear instructions for using the `web_search.py` script without any prompt injection attempts. The `web_search.py` script legitimately retrieves Volcengine API credentials from environment variables or VeFaaS IAM, and then makes a standard API call to `mercury.volcengineapi.com` for web search, passing the user query as data within a JSON payload. There is no evidence of malicious execution, data exfiltration to unauthorized endpoints, or other harmful behaviors.
Capability Assessment
Purpose & Capability
The skill name/description (volcengine web search) matches the included script that likely calls Volcengine's web search API. Requesting VOLCENGINE_ACCESS_KEY and VOLCENGINE_SECRET_KEY is reasonable for that purpose, but the registry metadata lists no required environment variables—an inconsistency that should be explained.
Instruction Scope
SKILL.md instructs the agent to run python scripts/web_search.py and explicitly says the script will read VOLCENGINE env vars or use VeFaaS IAM temporary credentials. That means the skill will access cloud credentials and make network calls. The instructions do not show any safeguards or state what data is sent/returned beyond a summary list; reliance on platform IAM creds (VeFaaS) is unexpected and broadens scope.
Install Mechanism
No install spec (instruction-only) — lowest installer risk. However the skill includes an executable script that will be run from disk; this is low-risk in terms of installation but means you must review the script before executing it.
Credentials
The runtime docs declare that the script will read VOLCENGINE_ACCESS_KEY and VOLCENGINE_SECRET_KEY and may use VeFaaS IAM temporary credentials, yet the skill metadata declares no required env vars or primary credential. Asking for cloud credentials is proportionate to web-search functionality, but the omission in metadata and the automatic use of platform IAM credentials are problematic and could grant broader access than the user expects.
Persistence & Privilege
The skill is not marked 'always' and no install is required, but disableModelInvocation is not set, so the model could invoke the skill autonomously if enabled. Combined with credential access, that allows the agent to perform networked searches without an explicit user prompt—consider whether you want that behavior.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install volcengine-web-search
  3. After installation, invoke the skill by name or use /volcengine-web-search
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of volcengine-web-search skill. - Allows users to quickly search the web via the volcengine web_search.py script. - Returns a summary list (up to 5 items) based strictly on web search results. - Requires VOLCENGINE credentials or uses VeFaaS IAM temporary credentials if not set. - Simple script execution for clear and specific queries.
Metadata
Slug volcengine-web-search
Version 1.0.0
License
All-time Installs 1
Active Installs 1
Total Versions 1
Frequently Asked Questions

What is volcengine-web-search?

Using volcengine web_search.py script to search web and get the result, prepare clear and specific `query`.Run the script `python scripts/web_search.py "query"`. Organize the answer based on the returned summary list, do not add or guess content. It is an AI Agent Skill for Claude Code / OpenClaw, with 871 downloads so far.

How do I install volcengine-web-search?

Run "/install volcengine-web-search" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is volcengine-web-search free?

Yes, volcengine-web-search is completely free (open-source). You can download, install and use it at no cost.

Which platforms does volcengine-web-search support?

volcengine-web-search is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created volcengine-web-search?

It is built and maintained by volcengine_skills (@warm-wm); the current version is v1.0.0.

💬 Comments