← 返回 Skills 市场

Baidu Scholar Search Skill 1.1.0

Name: Baidu Scholar Search Skill 1.1.0
Author: lean-zhouchao

作者 lean-zhouchao · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

277

总下载

当前安装

版本数

在 OpenClaw 中安装

/install baidu-scholar-search-skill-1-1-0

功能描述

Baidu Scholar Search - Search Chinese and English academic literature (journals, conferences, papers, etc.)

使用说明 (SKILL.md)

Baidu Scholar Search Skill

Features

Search Chinese and English academic literature by keyword, including journal papers, conference papers, dissertations, etc.

LLM Usage Guide

Basic Usage

bash baidu_scholar_search.sh "keyword"
bash baidu_scholar_search.sh "keyword" page_number
bash baidu_scholar_search.sh "keyword" page_number include_abstract

Parameter Description

Parameter	Required	Default	Description
keyword	✅	-	Search term, e.g., "machine learning" or "cancer immunotherapy"
page_number	❌	0	Starts from 0, 0=first page, 1=second page
include_abstract	❌	false	true=return detailed abstract, false=return only title and basic info

Default Behavior

No abstract returned - Fast response, suitable for quickly browsing literature lists
Start from page 1

When to Return Abstract

User explicitly requests "abstract", "include abstract", "detailed content"
User says "I need to understand the paper content", "give me detailed explanation"

When NOT to Return Abstract

User only says "search", "retrieve", "check"
User says "see what's available", "help me find"
No explicit request for abstract information

API Specification

Endpoint

GET https://qianfan.baidubce.com/v2/tools/baidu_scholar/search

Request Parameters

wd - Search keyword (required)
pageNum - Page number (optional, default 0)
enable_abstract - Whether to return abstract (optional, default false)

Response Fields

title - Paper title
abstract - Abstract (only returned when enable_abstract=true)
keyword - Keywords
paperId - Paper ID
publishYear - Publication year
url - Baidu Scholar link

Examples

Quick Search (No Abstract)

bash baidu_scholar_search.sh "cancer immunotherapy"
# Returns title, year, keywords and other basic information

Detailed Search (With Abstract)

bash baidu_scholar_search.sh "cancer immunotherapy" 0 true
# Returns detailed information including abstract

Pagination Search

bash baidu_scholar_search.sh "machine learning" 1
# Search page 2 (no abstract)

Notes

Need to set BAIDU_API_KEY environment variable
Keywords must be wrapped in quotes
Returning abstract significantly increases response time
Both Chinese and English keywords are supported

安全使用建议

This skill appears to do what it says: it sends your search terms (and optionally requested abstracts) to a Baidu endpoint using the BAIDU_API_KEY you provide. Before installing: 1) Confirm you trust the endpoint (qianfan.baidubce.com) and that your BAIDU_API_KEY has only the permissions it needs; 2) Be aware that search queries and any requested abstracts are transmitted to Baidu — avoid sending sensitive or private text; 3) Consider URL-encoding user-supplied keywords (the included script does not) to avoid malformed requests or accidental leakage of special characters; 4) Note metadata inconsistencies in owner/version fields in the package files — verify the publisher if provenance matters; 5) Protect the BAIDU_API_KEY (use least-privileged keys and rotate if compromised). If you need stronger guarantees about input handling or privacy, request a version that URL-encodes inputs and documents the exact API behavior and data retention policy.

功能分析

Type: OpenClaw Skill Name: baidu-scholar-search-skill-1-1-0 Version: 1.0.0 The skill implements a Baidu Scholar search tool but contains a security vulnerability in `baidu_scholar_search.sh` due to a lack of input sanitization. User-provided keywords are injected directly into a `curl` URL string without URL encoding, which allows for parameter injection (e.g., adding arbitrary query parameters to the API request) and may cause the script to fail or behave unexpectedly with special characters. While the behavior aligns with the stated purpose, the lack of sanitization for shell-executed commands is a high-risk flaw.

能力评估

✓ Purpose & Capability

Name/description, required binary (curl), declared env var (BAIDU_API_KEY), SKILL.md endpoint, and the included bash script all align with a search wrapper for Baidu Scholar. Nothing requested appears unrelated to the stated purpose.

ℹ Instruction Scope

Runtime instructions and the bash script stay within the search scope (they send the keyword/page/abstract flags to the Baidu endpoint). Minor implementation issues: the script inserts the keyword into the URL without URL-encoding or sanitization, which may cause broken requests or unexpected encoding and could alter queries sent to the remote endpoint. The script also adds a custom header (X-Appbuilder-From: openclaw) which leaks that the request originated from this skill.

✓ Install Mechanism

Instruction-only with a small bash script and no install spec — lowest-risk class. No downloads or archives; nothing is written to disk beyond the included script.

ℹ Credentials

Requesting a single BAIDU_API_KEY is proportionate to calling the Baidu API. The skill will send that key in an Authorization: Bearer header to qianfan.baidubce.com (the declared endpoint), so protect the key as it is transmitted to a third party. No other credentials or unrelated env vars are requested.

✓ Persistence & Privilege

always is false and the skill does not request persistent or system-wide privileges. It does not modify other skills or agent configs.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install baidu-scholar-search-skill-1-1-0
安装完成后，直接呼叫该 Skill 的名称或使用 /baidu-scholar-search-skill-1-1-0 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of Baidu Scholar Search Skill. - Search Chinese and English academic literature by keyword, including journals, conferences, and dissertations. - Supports searching with pagination and option to include abstracts. - Fast default search returns titles and basic info; abstracts returned only if explicitly requested. - Requires setting the `BAIDU_API_KEY` environment variable. - Command-line usage and example API request formats documented.

元数据

Slug baidu-scholar-search-skill-1-1-0

版本 1.0.0

许可证 MIT-0

累计安装 3

当前安装数 2

历史版本数 1

常见问题