ZeeLin Deep Research 深度研究

ZeeLin Deep Research 深度研究是一款 AI 驱动的专业研究辅助平台，支持一句话生成与多步骤生成，提供深度、专家两大研究路径。从快速信息梳理、系统分析到超万字专家报告全流程覆盖，依托多轮推理与多源数据整合，高效完成企业分析、市场洞察、招商研究等复杂任务，一站式提升研究效率与决策质量。

This skill appears to call the ZeeLin API and is generally coherent, but there are important mismatches you should resolve before installing: the SKILL.md expects an API key (DESEARCH_API_KEY) and uses jq in shell examples, yet the package metadata does not declare any required environment variables or jq as a required binary. Confirm the skill's source/trustworthiness (the homepage is missing), and verify the domain (desearch.zeelin.cn) is legitimate. If you plan to use it, provide the API key only when necessary (prefer per-session credentials rather than permanently exporting secrets), and be aware the skill will download report files and may send them via whatever 'message' tool your agent provides. Ask the author to: (1) declare DESEARCH_API_KEY in requires.env/primaryEnv, (2) list jq if examples require it (or remove jq from examples), and (3) provide a homepage or publisher identity. If you cannot validate the publisher, avoid installing or restrict the skill's network/file permissions and monitor outgoing requests.

Type: OpenClaw Skill Name: zeelin-deep-research Version: 1.0.1 The skill provides a complex integration with the ZeeLin Deep Research API (desearch.zeelin.cn), requiring an API key and using tools like curl, jq, and unzip. It is classified as suspicious due to significant shell injection risks in the provided instructions; the agent is directed to execute bash scripts that use unsanitized data from API responses (e.g., sessionId and title) directly in commands. Additionally, the logic for Feishu integration involves unzipping downloaded files and using sed to parse XML, which increases the risk of exploitation if the remote service or its output is compromised.