← 返回 Skills 市场

Baidu Smart Search

Name: Baidu Smart Search
Author: windrunner20

作者 Winrunner_20 · GitHub ↗ · v0.1.1 · MIT-0

cross-platform ⚠ suspicious

100

总下载

当前安装

版本数

在 OpenClaw 中安装

/install baidu-smart-search

功能描述

Call Baidu Qianfan web search APIs to search the live web with AppBuilder credentials and return structured results. Use when a task specifically needs Baidu...

使用说明 (SKILL.md)

Baidu Qianfan Search

Use this skill to query Baidu Qianfan's web search API and return structured search results without scraping websites directly.

Quick start

Store the API key in an environment variable before running scripts:

export QIANFAN_APPBUILDER_API_KEY='...'

Or keep it in a local untracked file such as .env.local and source it manually:

set -a
source ./.env.local
set +a

Run the bundled script:

python3 scripts/qianfan_search.py "北京有哪些旅游景区"

For raw JSON debugging:

python3 scripts/qianfan_search.py "北京有哪些旅游景区" --raw

Common patterns

Basic web search

python3 scripts/qianfan_search.py "百度千帆平台"

Restrict to specific sites

python3 scripts/qianfan_search.py "天气预报" --site weather.com.cn --site www.weather.com.cn

Filter by recency

python3 scripts/qianfan_search.py "近期 AI 智能体新闻" --recency week

Request images or videos too

python3 scripts/qianfan_search.py "故宫博物院" --web-top-k 5 --image-top-k 5 --video-top-k 3 --raw

Output handling

Default mode prints a normalized JSON object with query, count, items, and discovered raw_keys.
--raw prints the full upstream JSON for troubleshooting or adapting to API changes.
If Baidu changes response fields, inspect raw output first, then patch scripts/qianfan_search.py.

Security rules

Never place the real API key in SKILL.md or references/.
Never publish .env.local to ClawHub.
Before packaging or publishing, delete any local secret files from the skill folder or ensure the publisher excludes them.

References

Read references/api.md for the concise endpoint and parameter summary.
Use scripts/qianfan_search.py as the canonical wrapper for the API.

安全使用建议

This skill appears to do what it claims (wrap Baidu Qianfan web_search). Before installing or running it: 1) be aware you must provide an AppBuilder API key (QIANFAN_APPBUILDER_API_KEY) even though the registry metadata doesn't declare it — prefer a dedicated, least-privilege key. 2) Don't publish or commit your .env or API key; follow the SKILL.md security rules. 3) Review the default endpoint (https://qianfan.baidubce.com/...) and avoid using the --url override unless you control the target, since pointing the script to an attacker-controlled URL could expose your key. 4) Ask the publisher to update the skill metadata to list the required environment variable and primary credential so automated tooling and other users can correctly assess required secrets.

功能分析

Type: OpenClaw Skill Name: baidu-smart-search Version: 0.1.1 The skill is a legitimate wrapper for the Baidu Qianfan web search API. The Python script (scripts/qianfan_search.py) uses standard libraries to perform authenticated POST requests to the official Baidu endpoint (qianfan.baidubce.com) and includes proper error handling. The documentation (SKILL.md and references/api.md) provides clear usage instructions and correctly emphasizes security best practices, such as using environment variables for API keys instead of hardcoding them.

能力评估

⚠ Purpose & Capability

Name, description, references, and the included script all consistently implement a Baidu Qianfan web search client. However the registry metadata lists no required environment variables or primary credential while SKILL.md and scripts/qianfan_search.py clearly require QIANFAN_APPBUILDER_API_KEY (or --api-key). The missing declared credential is an inconsistency.

✓ Instruction Scope

SKILL.md instructs the agent/user to set the AppBuilder API key and run the included Python wrapper. The runtime instructions and script only perform expected actions: build a JSON payload and POST to the documented Baidu Qianfan endpoint, then normalize results. There are no instructions to read unrelated files, harvest other environment variables, or send data to third-party endpoints beyond the (documented) API. One minor note: the script accepts a --url override, which lets callers point to a non-default endpoint if intentionally used.

✓ Install Mechanism

No install spec; this is an instruction-only skill with a small included Python script. Nothing is downloaded or installed by the skill, so install risk is low.

⚠ Credentials

The skill legitimately needs an AppBuilder API key (QIANFAN_APPBUILDER_API_KEY) to authenticate to the Baidu endpoint; that is proportionate to its purpose. However the skill metadata does not declare this required environment variable or a primary credential, creating an information gap. The SKILL.md appropriately warns not to publish keys, but the mismatch between declared requirements and runtime expectations is problematic for users and for automated permission/credential checks.

✓ Persistence & Privilege

The skill does not request always:true and contains no install steps that persist beyond the skill files. It does network I/O only when invoked and does not modify other skills or system-wide settings.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install baidu-smart-search
安装完成后，直接呼叫该 Skill 的名称或使用 /baidu-smart-search 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.1.1

Rename display and canonical slug to Baidu Smart Search

元数据

Slug baidu-smart-search

版本 0.1.1

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题