← 返回 Skills 市场
abeltennyson

Baidu Scholar Search

作者 AbelTennyson · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
65
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install abe-baidu-scholar-search
功能描述
Academic Literature Search Tool enables the retrieval of both Chinese and English literature, covering various types of literature such as academic journals,...
使用说明 (SKILL.md)

Academic Scholar Search

Based on the keywords entered by the user, search for both Chinese and English literature, covering various types of literature such as academic journals, conference papers, and dissertations

Setup

  1. API Key: Ensure the SKILLBOSS_API_KEY environment variable is set with your valid SkillBoss API Hub key.
  2. Environment: The API key should be available in the runtime environment.

API table

name path description
scholar_search https://api.heybossai.com/v1/pilot Based on the keywords entered, search for both Chinese and English literature via SkillBoss API Hub

Workflow

  1. The script makes a POST request to the SkillBoss API Hub /v1/pilot endpoint with type: "search"
  2. The API returns structured search results about a list of literature

Scholar Search API

Parameters

  • wd: The search keywords (required, e.g. 'machine learning')
  • pageNum: page num (default: 0)
  • enable_abstract: whether to enable abstract (default: false)

Example Usage

curl -s -X POST 'https://api.heybossai.com/v1/pilot' \
-H 'Authorization: Bearer $SKILLBOSS_API_KEY' \
-H 'Content-Type: application/json' \
-d '{"type": "search", "inputs": {"query": "人工智能"}, "prefer": "balanced"}'

EXEC scripts

#!/bin/bash

# Academic Scholar Search Skill Implementation
# Powered by SkillBoss API Hub

set -e

# Check if required environment variable is set
if [ -z "$SKILLBOSS_API_KEY" ]; then
    echo '{"error": "SKILLBOSS_API_KEY environment variable not set"}'
    exit 1
fi

WD="$1"
if [ -z "$WD" ]; then
    echo '{"error": "Missing wd parameter"}'
    exit 1
fi

pageNum="${2:-0}"
enable_abstract="${3:-false}"

curl -s -X POST \
  -H "Authorization: Bearer $SKILLBOSS_API_KEY" \
  -H "Content-Type: application/json" \
  -d "{\"type\": \"search\", \"inputs\": {\"query\": \"$WD\"}, \"prefer\": \"balanced\"}" \
  "https://api.heybossai.com/v1/pilot"
# Response path: .result.results
安全使用建议
This skill will send whatever search terms you provide to a third-party service (api.heybossai.com) and requires you to supply SKILLBOSS_API_KEY. Before installing, confirm whether you trust the SkillBoss provider and why the skill advertises Baidu but proxies through SkillBoss. Ask the publisher to clarify the data flow and update the registry metadata to declare SKILLBOSS_API_KEY. If you plan to provide a real API key, verify the service's privacy policy and consider using a scoped/limited key. If the provenance can't be explained (official proxy, documented aggregator, or publisher contact), avoid using it for sensitive queries.
功能分析
Type: OpenClaw Skill Name: abe-baidu-scholar-search Version: 1.0.0 The skill bundle contains a shell injection vulnerability in both `baidu_scholar_search.sh` and the embedded script in `SKILL.md`. The user-provided search query (`$WD`) is directly interpolated into a double-quoted string within a `curl` command, allowing for potential command execution if the input contains shell metacharacters (e.g., backticks or $(...)). While the tool's functionality of querying `api.heybossai.com` aligns with its stated purpose, the lack of input sanitization is a significant security flaw.
能力标签
requires-sensitive-credentials
能力评估
Purpose & Capability
The skill is named and advertised as 'Baidu Scholar Search' (homepage xueshu.baidu.com), but both SKILL.md and the provided script POST search queries to https://api.heybossai.com/v1/pilot (SkillBoss). That may be a legitimate proxy, but the manifest and description do not explain this indirection. Also the registry metadata lists no required environment variables while SKILL.md and the script require SKILLBOSS_API_KEY — an internal inconsistency.
Instruction Scope
The runtime instructions and the included shell script are narrow: they take a query and POST it to the SkillBoss API. They do not read unrelated files or system state. However, user search queries (potentially sensitive) are transmitted to a third-party endpoint (api.heybossai.com) rather than directly to Baidu; the SKILL.md does not make that explicit to users.
Install Mechanism
This is an instruction-only skill with no install spec; it requires only curl (already declared). No downloads or archive extraction occur, which is low install risk.
Credentials
The script requires a single API credential (SKILLBOSS_API_KEY), which is proportionate if the skill uses SkillBoss. However the registry metadata did not declare any required env vars, and the advertised Baidu origin does not justify requiring a SkillBoss API key — an unexplained credential request and provenance mismatch.
Persistence & Privilege
The skill has default privileges (not always:true) and does not request persistent system-level privileges or modify other skills. Autonomous invocation is allowed (platform default) but is not combined here with elevated privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install abe-baidu-scholar-search
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /abe-baidu-scholar-search 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of Baidu Scholar Search skill. - Search academic literature (journals, conference papers, dissertations) in both Chinese and English using keywords. - Uses the SkillBoss API Hub for comprehensive search results. - Requires SKILLBOSS_API_KEY environment variable for authentication. - Supports pagination and optional abstract retrieval. - Simple setup and usage via curl commands.
元数据
Slug abe-baidu-scholar-search
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Baidu Scholar Search 是什么?

Academic Literature Search Tool enables the retrieval of both Chinese and English literature, covering various types of literature such as academic journals,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 65 次。

如何安装 Baidu Scholar Search?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install abe-baidu-scholar-search」即可一键安装,无需额外配置。

Baidu Scholar Search 是免费的吗?

是的,Baidu Scholar Search 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Baidu Scholar Search 支持哪些平台?

Baidu Scholar Search 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Baidu Scholar Search?

由 AbelTennyson(@abeltennyson)开发并维护,当前版本 v1.0.0。

💬 留言讨论