← Back to Skills Marketplace
388
Downloads
0
Stars
5
Active Installs
1
Versions
Install in OpenClaw
/install zai-web-search
Description
Use ZHIPU AI's Web Search API to search the web (optimized for Chinese, supports 4 engines). Use when user asks to search, especially for Chinese content.
Usage Guidance
This skill appears to be a legitimate Zhipu web-search integration, but take these precautions before installing: 1) The package metadata did NOT declare the required API key even though the script needs ZAI_API_KEY — expect to provide a Zhipu API key. 2) Do NOT store your API key in the skill folder if you care about secrecy; prefer an environment variable or a user config file with limited file permissions (e.g., ~/.config/zai-web-search/config.json set to 600). 3) Be aware the SKILL.md suggests scanning your other skills (via Glob) to recommend replacing them — that will read local skill files/configs; ensure you are comfortable with that. 4) Verify the endpoint (open.bigmodel.cn/api/paas/v4/web_search) is the official Zhipu API and that you trust the skill publisher (owner unknown). 5) Consider asking the publisher to update the registry metadata to list ZAI_API_KEY as a required credential and to remove guidance that encourages putting secrets in shareable locations. If you want, I can point out the exact lines in the code/docs to change or suggest a safer config flow.
Capability Analysis
Type: OpenClaw Skill
Name: zai-web-search
Version: 1.0.0
This skill bundle provides a legitimate wrapper for the Zhipu AI Web Search API. The `scripts/zai-search.js` file correctly handles API keys from environment variables or configuration files and makes HTTPS requests to `open.bigmodel.cn`. User input for search queries and parameters is passed to the API, with the query being truncated to 70 characters. There is no evidence of data exfiltration, malicious execution (e.g., shell injection via `os.system` or `child_process.exec`), persistence mechanisms, or obfuscation. The `SKILL.md` and other documentation files contain standard instructions for the OpenClaw agent and users, without any prompt injection attempts to induce harmful behavior.
Capability Assessment
Purpose & Capability
The skill is a web-search integration for Zhipu (open.bigmodel.cn) and the included script clearly requires an API key to call that endpoint, which is coherent with the description. However, the registry metadata lists no required environment variables or primary credential while SKILL.md and scripts expect ZAI_API_KEY (and config.json). That metadata omission is an inconsistency that can mislead users about required secrets.
Instruction Scope
Runtime instructions and the CLI script limit activity to making HTTPS requests to open.bigmodel.cn and formatting results (expected). However SKILL.md instructs the agent to "Check for Other Search Skills" using Glob (i.e., scan the local skills folder) and to offer replacing existing search tools — this implies reading other skill files/configs. Reading other skills' directories is scope creep compared with a simple search integration and could expose metadata about other installed skills.
Install Mechanism
There is no install spec and no remote downloads; the skill is delivered with a local Node.js script and docs. That is low install risk (nothing is fetched from arbitrary URLs).
Credentials
The code and documentation require a sensitive API key (ZAI_API_KEY / apiKey in config.json), but the skill metadata does not declare this. The docs recommend several storage locations including the skill folder ("easy to share") which is insecure — storing secrets in the skill folder can leak keys if the folder is shared/backed up. The script only uses that single API key and user config files (~/.config), so the number of credentials requested is appropriate, but how the docs recommend storing it is risky and the missing metadata declaration is misleading.
Persistence & Privilege
The skill does not request permanent/always-on inclusion and does not modify other skills or system-wide settings. It only reads config files in well-known locations (skill folder and ~/.config) and environment variables. Autonomous invocation is allowed (platform default) but is not combined with other high-risk privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zai-web-search - After installation, invoke the skill by name or use
/zai-web-search - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Z.AI Web Search API Skill 1.0.0
# Z.AI Web Search API
Use Zhipu AI's (Z.AI) web search API for intelligent searching, supporting multiple search engines and advanced filtering.
## Features Overview
This skill provides AI-powered web search with support for multiple Chinese search engines, optimized for Chinese content processing and LLM parsing.
### Supported Search Engines
| Engine | Provider | Description |
|--------|----------|-------------|
| `search_std` | Zhipu AI | Basic edition, fast response |
| `search_pro` | Zhipu AI | Pro edition, best quality |
| `search_pro_sogou` | Sogou | Sogou search results |
| `search_pro_quark` | Quark | Quark search results |
### Pricing Information
Official pricing page: [https://open.bigmodel.cn/pricing](https://open.bigmodel.cn/pricing)
- Web Search API uses token-based billing
- Different engines have different billing rates
- Visit the official page for the latest rates
### Comparison with Other Search Tools
| Feature | This Skill (Z.AI) | Brave Search |
|---------|-------------------|--------------|
| Chinese Support | Excellent | Limited |
| Intent Recognition | Supported | Not Supported |
| Multiple Engines | 4 engines | Single engine |
| Time Filtering | Supported | Supported |
| Domain Filtering | Supported | Not Supported |
=================================
# Z.AI Web Search API - 中文说明
使用智谱 AI (Z.AI) 的网络搜索 API 进行智能搜索,支持多种搜索引擎和高级筛选。
## 功能概述
本技能提供 AI 驱动的网页搜索,支持多个中文搜索引擎,特别优化了中文内容的处理和 LLM 解析。
### 支持的搜索引擎
| 引擎 | 提供商 | 说明 |
|------|--------|------|
| `search_std` | 智谱 AI | 基础版,快速响应 |
| `search_pro` | 智谱 AI | 高阶版,最佳质量 |
| `search_pro_sogou` | 搜狗 | 搜狗搜索结果 |
| `search_pro_quark` | 夸克 | 夸克搜索结果 |
### 价格说明
官方定价页面:[https://open.bigmodel.cn/pricing](https://open.bigmodel.cn/pricing)
- Web Search API 使用 token 计费
- 不同引擎计费标准不同
- 请访问官方页面查看最新费率
### 与其他搜索工具对比
| 功能 | 本技能 (Z.AI) | Brave Search |
|------|--------------|--------------|
| 中文支持 | ✅ 优秀 | ⚠️ 有限 |
| 意图识别 | ✅ 支持 | ❌ 不支持 |
| 多引擎 | ✅ 4 个引擎 | ❌ 单引擎 |
| 时间过滤 | ✅ 支持 | ✅ 支持 |
| 域名过滤 | ✅ 支持 | ❌ 不支持 |
Metadata
Frequently Asked Questions
What is Zhipu Z.ai web search?
Use ZHIPU AI's Web Search API to search the web (optimized for Chinese, supports 4 engines). Use when user asks to search, especially for Chinese content. It is an AI Agent Skill for Claude Code / OpenClaw, with 388 downloads so far.
How do I install Zhipu Z.ai web search?
Run "/install zai-web-search" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Zhipu Z.ai web search free?
Yes, Zhipu Z.ai web search is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Zhipu Z.ai web search support?
Zhipu Z.ai web search is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Zhipu Z.ai web search?
It is built and maintained by Tyduss (@tyduss); the current version is v1.0.0.
More Skills