← Back to Skills Marketplace
246
Downloads
2
Stars
0
Active Installs
6
Versions
Install in OpenClaw
/install tencenthotsearch-skill
Description
Fetches trending news and articles using Tencent Cloud Online Search API (SearchPro). Supports searching across the entire web or within specific sites, with...
Usage Guidance
This skill appears to do what it says: sign requests and query Tencent's Online Search API, then write results to files. Before installing: (1) Verify the GitHub repository and that the distributed files match upstream; (2) Do not trust the registry metadata that claims no credentials — the code requires SecretId/SecretKey in config.json; (3) Use temporary / least-privileged Tencent API keys and run the skill in a container or VM; (4) Keep config.json out of version control and set restrictive permissions (chmod 600); (5) Review scripts/tencent_hotsearch.py yourself (it builds HMAC signatures and sends requests to wsa.tencentcloudapi.com); (6) Monitor network activity to confirm only the official endpoint is contacted; (7) If you need stronger assurance, ask the publisher for a signed release or checksums and a corrected registry metadata entry.
Capability Analysis
Type: OpenClaw Skill
Name: tencenthotsearch-skill
Version: 1.0.5
The TencentHotSearch-skill is a legitimate utility for searching news and articles via the Tencent Cloud SearchPro API. The implementation in `scripts/tencent_hotsearch.py` is transparent, using only the Python standard library for network requests and HMAC-SHA256 signing, with no evidence of data exfiltration or malicious execution. The skill includes proactive security features such as path traversal protection and secret masking in logs, and it is accompanied by exceptionally thorough security documentation (`SECURITY.md`, `CONFIG.md`) that guides users on safe credential management and acknowledges potential metadata discrepancies.
Capability Assessment
Purpose & Capability
The skill is a Tencent Cloud Search client and the code (scripts/tencent_hotsearch.py) requires Tencent SecretId/SecretKey in config.json and network access to wsa.tencentcloudapi.com. This is consistent with the described functionality. However, the registry metadata (as surfaced to the platform) incorrectly claims no credentials/config required — a documentation mismatch that the SKILL.md explicitly warns about.
Instruction Scope
SKILL.md and the included README/CONFIG/SECURITY docs instruct the agent to read a local config.json for credentials, call the Tencent SearchPro API, and write results to an output directory. The runtime instructions do not request unrelated system files, other service credentials, or external endpoints outside the official Tencent API. They also advise code review and isolated execution.
Install Mechanism
No install spec or external download is present; this is an instruction-only skill with bundled source files. Requirements.txt lists no non-stdlib dependencies (pandas optional). No archive downloads or third-party install hosts are used.
Credentials
The only required secrets are the Tencent SecretId and SecretKey stored in a config.json file — this is proportionate for calling Tencent's API. The skill writes output files to disk and performs network calls to the official endpoint. Note: storing credentials in a file has inherent risks (the project documents this and recommends chmod 600, .gitignore, temporary keys). Also flag the registry metadata inconsistency: platform-side metadata lists no credentials while SKILL.md/code require them.
Persistence & Privilege
No elevated persistence is requested (always:false). The skill does not modify other skills or global agent settings. It will be able to perform network calls and write files at runtime, which are necessary for its stated purpose.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install tencenthotsearch-skill - After installation, invoke the skill by name or use
/tencenthotsearch-skill - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.5
No code or documentation changes detected in this release.
- No changes identified between version 1.0.4 and 1.0.5.
- All files remain unchanged.
v1.0.4
No file or functional changes were detected in this release.
- Version updated to 1.0.4 with no modifications to files or documentation.
- No new features, bug fixes, or content updates included.
- Existing documentation, configuration, and security guidance remain unchanged.
v1.0.3
TencentHotSearch-skill 1.0.3
- Added required SKILL files: README.md, CONFIG.md, SECURITY.md, config.json, requirements.txt, and scripts.
- Declared explicit homepage and repository links in SKILL.md.
- Marked secret_id and secret_key as sensitive credentials in SKILL.md with user warnings.
- Updated permissions section to explicitly mark required network and file write access.
- Added comprehensive security notice and pre-install checklist to SKILL.md.
- Provided clear security feature summary and links to relevant documentation.
v1.0.2
- Removed all code and configuration files, including main script, configuration, and documentation files.
- Skill now only retains metadata and descriptive documentation (SKILL.md).
- Added a major security warning section in SKILL.md about credential/config requirements and safe usage practices.
- Users are alerted to a metadata/documentation mismatch regarding required credentials.
- Strong emphasis on manual review, using sandboxed environments, and best practices for secrets handling.
v1.0.1
TencentHotSearch-skill v1.0.1
- Added manifest metadata: required_credentials and permissions now clearly listed in SKILL.md.
- Removed files: config.example.json and examples/usage_examples.py.
- SKILL.md revised—now written in English, with credential and permission requirements specified.
- No functional changes to core search skill.
v1.0.0
- Initial release of TencentHotSearch-skill.
- Supports fetching trending news and articles using Tencent Cloud Online Search API (SearchPro).
- Allows multi-keyword search (1-5 keywords), with options for site-specific or full web searches.
- Supports three search modes (natural, multi-modal VR, hybrid), time and industry filtering, and multiple output formats (MD, JSON, CSV, TXT).
- Provides results with structured information including title, summary, source, publish time, link, relevance score, and images.
- Includes robust configuration options, error handling, and comprehensive usage instructions.
Metadata
Frequently Asked Questions
What is Tencent Web Search API?
Fetches trending news and articles using Tencent Cloud Online Search API (SearchPro). Supports searching across the entire web or within specific sites, with... It is an AI Agent Skill for Claude Code / OpenClaw, with 246 downloads so far.
How do I install Tencent Web Search API?
Run "/install tencenthotsearch-skill" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Tencent Web Search API free?
Yes, Tencent Web Search API is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Tencent Web Search API support?
Tencent Web Search API is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Tencent Web Search API?
It is built and maintained by hanli (@neuhanli); the current version is v1.0.5.
More Skills