Bailian KnowledgeBase(Provided by Alibaba ModelStdio) offers to retrieve any proprietary data that have been vectorized in the hosted knowledgebases. It retu...

This skill appears coherent and performs exactly what it says: it will send your query and the provided DASHSCOPE_API_KEY and KNOWLEDGEBASE_ID to the Dashscope/Aliyun retrieve endpoint and print returned documents. Before installing or using it, verify the following: (1) only provide an API key that is scoped/limited to the specific knowledgebase (avoid sharing full account/root keys); (2) confirm you trust the skill source and the Alibaba endpoint used (dashscope.aliyuncs.com) because responses may contain proprietary content; (3) ensure the runtime environment has the Python 'requests' package installed (the SKILL.md only lists python3); (4) consider using short-lived or revocable credentials and auditing access logs on your knowledgebase; and (5) avoid passing highly sensitive queries unless you are comfortable that the remote service and provided API key are trusted and access-controlled.

Type: OpenClaw Skill Name: bailian-knowledge-retrieve Version: 1.0.0 The skill bundle is benign. It retrieves information from a Bailian KnowledgeBase using a provided API key and knowledge base ID from environment variables. User input for the query is safely passed as an argument to the Python script and then included in a JSON payload via the `requests` library, preventing injection. There is no evidence of prompt injection against the agent, data exfiltration to unauthorized endpoints, arbitrary code execution, or other malicious activities. The code adheres to secure practices for its stated purpose.