← Back to Skills Marketplace
abeltennyson

Baidu Scholar Search

by AbelTennyson · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
65
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install abe-baidu-scholar-search
Description
Academic Literature Search Tool enables the retrieval of both Chinese and English literature, covering various types of literature such as academic journals,...
README (SKILL.md)

Academic Scholar Search

Based on the keywords entered by the user, search for both Chinese and English literature, covering various types of literature such as academic journals, conference papers, and dissertations

Setup

  1. API Key: Ensure the SKILLBOSS_API_KEY environment variable is set with your valid SkillBoss API Hub key.
  2. Environment: The API key should be available in the runtime environment.

API table

name path description
scholar_search https://api.heybossai.com/v1/pilot Based on the keywords entered, search for both Chinese and English literature via SkillBoss API Hub

Workflow

  1. The script makes a POST request to the SkillBoss API Hub /v1/pilot endpoint with type: "search"
  2. The API returns structured search results about a list of literature

Scholar Search API

Parameters

  • wd: The search keywords (required, e.g. 'machine learning')
  • pageNum: page num (default: 0)
  • enable_abstract: whether to enable abstract (default: false)

Example Usage

curl -s -X POST 'https://api.heybossai.com/v1/pilot' \
-H 'Authorization: Bearer $SKILLBOSS_API_KEY' \
-H 'Content-Type: application/json' \
-d '{"type": "search", "inputs": {"query": "人工智能"}, "prefer": "balanced"}'

EXEC scripts

#!/bin/bash

# Academic Scholar Search Skill Implementation
# Powered by SkillBoss API Hub

set -e

# Check if required environment variable is set
if [ -z "$SKILLBOSS_API_KEY" ]; then
    echo '{"error": "SKILLBOSS_API_KEY environment variable not set"}'
    exit 1
fi

WD="$1"
if [ -z "$WD" ]; then
    echo '{"error": "Missing wd parameter"}'
    exit 1
fi

pageNum="${2:-0}"
enable_abstract="${3:-false}"

curl -s -X POST \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY" \
  -H "Content-Type: application/json" \
  -d "{\"type\": \"search\", \"inputs\": {\"query\": \"$WD\"}, \"prefer\": \"balanced\"}" \
  "https://api.heybossai.com/v1/pilot"
# Response path: .result.results
Usage Guidance
This skill will send whatever search terms you provide to a third-party service (api.heybossai.com) and requires you to supply SKILLBOSS_API_KEY. Before installing, confirm whether you trust the SkillBoss provider and why the skill advertises Baidu but proxies through SkillBoss. Ask the publisher to clarify the data flow and update the registry metadata to declare SKILLBOSS_API_KEY. If you plan to provide a real API key, verify the service's privacy policy and consider using a scoped/limited key. If the provenance can't be explained (official proxy, documented aggregator, or publisher contact), avoid using it for sensitive queries.
Capability Analysis
Type: OpenClaw Skill Name: abe-baidu-scholar-search Version: 1.0.0 The skill bundle contains a shell injection vulnerability in both `baidu_scholar_search.sh` and the embedded script in `SKILL.md`. The user-provided search query (`$WD`) is directly interpolated into a double-quoted string within a `curl` command, allowing for potential command execution if the input contains shell metacharacters (e.g., backticks or $(...)). While the tool's functionality of querying `api.heybossai.com` aligns with its stated purpose, the lack of input sanitization is a significant security flaw.
Capability Tags
requires-sensitive-credentials
Capability Assessment
Purpose & Capability
The skill is named and advertised as 'Baidu Scholar Search' (homepage xueshu.baidu.com), but both SKILL.md and the provided script POST search queries to https://api.heybossai.com/v1/pilot (SkillBoss). That may be a legitimate proxy, but the manifest and description do not explain this indirection. Also the registry metadata lists no required environment variables while SKILL.md and the script require SKILLBOSS_API_KEY — an internal inconsistency.
Instruction Scope
The runtime instructions and the included shell script are narrow: they take a query and POST it to the SkillBoss API. They do not read unrelated files or system state. However, user search queries (potentially sensitive) are transmitted to a third-party endpoint (api.heybossai.com) rather than directly to Baidu; the SKILL.md does not make that explicit to users.
Install Mechanism
This is an instruction-only skill with no install spec; it requires only curl (already declared). No downloads or archive extraction occur, which is low install risk.
Credentials
The script requires a single API credential (SKILLBOSS_API_KEY), which is proportionate if the skill uses SkillBoss. However the registry metadata did not declare any required env vars, and the advertised Baidu origin does not justify requiring a SkillBoss API key — an unexplained credential request and provenance mismatch.
Persistence & Privilege
The skill has default privileges (not always:true) and does not request persistent system-level privileges or modify other skills. Autonomous invocation is allowed (platform default) but is not combined here with elevated privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install abe-baidu-scholar-search
  3. After installation, invoke the skill by name or use /abe-baidu-scholar-search
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of Baidu Scholar Search skill. - Search academic literature (journals, conference papers, dissertations) in both Chinese and English using keywords. - Uses the SkillBoss API Hub for comprehensive search results. - Requires SKILLBOSS_API_KEY environment variable for authentication. - Supports pagination and optional abstract retrieval. - Simple setup and usage via curl commands.
Metadata
Slug abe-baidu-scholar-search
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Baidu Scholar Search?

Academic Literature Search Tool enables the retrieval of both Chinese and English literature, covering various types of literature such as academic journals,... It is an AI Agent Skill for Claude Code / OpenClaw, with 65 downloads so far.

How do I install Baidu Scholar Search?

Run "/install abe-baidu-scholar-search" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Baidu Scholar Search free?

Yes, Baidu Scholar Search is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Baidu Scholar Search support?

Baidu Scholar Search is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Baidu Scholar Search?

It is built and maintained by AbelTennyson (@abeltennyson); the current version is v1.0.0.

💬 Comments