Perform web searches using Alibaba Cloud UnifiedSearch API. Provides advanced search capabilities with configurable parameters.

This skill appears to genuinely call Alibaba Cloud UnifiedSearch, but there are transparency and small consistency issues you should address before installing or running it with real credentials: 1) The registry metadata does not declare the two Alibaba environment variables the script expects — ask the publisher to update metadata so you can see required secrets up front. 2) Verify the source/owner and ask for a homepage or repository link; the package currently has no verified source. 3) Check the import vs pip package names (aliyunsdkcore vs aliyun-python-sdk-core) and test in an isolated environment. 4) When you create or use AccessKey/Secret, apply least-privilege IAM policies (restrict to only the needed UnifiedSearch actions and resources) and avoid using root account keys. 5) Review the included scripts yourself or have someone you trust review them; if you must run immediately, do so from an isolated VM/container and with temporary, limited-scope credentials. If the publisher supplies correct metadata, package source, and a clear minimal-permission IAM guidance, the concerns here would be reduced.

Type: OpenClaw Skill Name: aliyun-search-1-0-0 Version: 1.0.0 The skill bundle is benign. The `SKILL.md` provides clear, legitimate instructions for setting up Alibaba Cloud credentials via environment variables and installing necessary dependencies. The `scripts/search.py` script correctly implements the stated functionality, using the official Alibaba Cloud SDK to interact with the legitimate `opensearch.cn-hangzhou.aliyuncs.com` endpoint. There is no evidence of data exfiltration to unauthorized destinations, malicious execution, persistence mechanisms, or prompt injection attempts against the agent.