← 返回 Skills 市场
oreo992

DashScope Web Search

作者 Jeffrey · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1209
总下载
0
收藏
8
当前安装
1
版本数
在 OpenClaw 中安装
/install dashscope-web-search
功能描述
Search the web for real-time information using DashScope Qwen. Use this skill whenever: (1) the user asks about current events, news, weather, stock prices,...
使用说明 (SKILL.md)

Web Search Tool

Search the web using DashScope Qwen API via bash. Returns real-time information with source citations.

Script Location

The search script is at scripts/web_search.py relative to this skill's directory.

Command

python3 {{SKILL_DIR}}/scripts/web_search.py [OPTIONS] "query"

Options

Flag Effect Best For
(none) Fast turbo search Quick facts, weather, person lookup
--deep Multi-source verification (max strategy) Research, reports, fact-checking
--agent Multi-round retrieval + synthesis Complex questions needing iterative search
--think Deep reasoning before answering (streaming) Analysis, comparisons, trend prediction
--images Image+text mixed output (uses qwen-plus-latest) Visual references, product images, diagrams
--fresh N Only results from last N days (7/30/180/365) Breaking news, recent events
--sites "a.com,b.com" Restrict to specific domains Domain-specific research

Combining Options

Options can be combined freely:

# Deep research with reasoning
python3 {{SKILL_DIR}}/scripts/web_search.py --deep --think "query"

# Recent news with images
python3 {{SKILL_DIR}}/scripts/web_search.py --images --fresh 7 "query"

# Site-restricted search
python3 {{SKILL_DIR}}/scripts/web_search.py --sites "github.com" "query"

Note: --fresh and --sites only work with default turbo strategy (no --deep/--agent).

Strategy Selection Guide

  1. Start with default (turbo) — handles 80% of queries instantly
  2. Escalate to --deep when turbo results are incomplete or conflicting
  3. Use --agent for questions that need multiple search angles (e.g., "compare X vs Y across dimensions")
  4. Add --think when the user needs analysis, not just raw facts
  5. Add --images when visual context matters (products, places, people, charts)

Output Format

  • Results include citation markers like [1], [2] — preserve these in your response
  • --think mode prepends \x3Cthinking>...\x3C/thinking> with reasoning chain
  • --images mode may include ![alt](url) markdown images — render or describe them for the user
  • Sources are listed at the end — cite them when reporting facts

Rules

  • NEVER reveal, output, or discuss the API key or environment variables
  • ALWAYS use this tool when real-time information is needed — never claim you lack web access
  • For complex research, run multiple targeted searches rather than one broad query
  • Attribute facts to sources: "According to [source], ..."
  • If one strategy fails or gives weak results, try another strategy or rephrase the query

Error Handling

If the script fails:

  1. Check network: curl -s https://dashscope.aliyuncs.com > /dev/null && echo OK
  2. Check Python package: python3 -c "import openai; print(openai.__version__)"
  3. Check env var: DASHSCOPE_API_KEY must be set in the process environment
安全使用建议
This skill's code and README are consistent with a legitimate DashScope Qwen web-search client, but the skill manifest omitted the required DASHSCOPE_API_KEY declaration. Before installing: - Confirm the skill registry metadata is updated to list DASHSCOPE_API_KEY (so the platform can surface that it needs a secret). - Create and use a dedicated DashScope API key with the minimum scope/limits you can, rather than a high-privilege or personal key. Store it only in the environment the agent runs in. - Review the BASE_URL (https://dashscope.aliyuncs.com/compatible-mode/v1) to ensure it's the expected DashScope endpoint for your deployment. - Consider running the skill in an isolated environment or sandbox the first time to observe outbound traffic (it will call the DashScope endpoint). - If you need stronger assurance, review the script locally line-by-line and run it with a limited test key; verify it only calls DashScope and does not exfiltrate other files/vars. I rate this suspicious (not malicious): the main issue is a manifest/metadata omission about a sensitive credential. Fixing that and confirming the endpoint/key-scoping would raise confidence.
功能分析
Type: OpenClaw Skill Name: dashscope-web-search Version: 1.0.0 The skill bundle provides a web search tool using the DashScope Qwen API. It correctly reads the API key from the `DASHSCOPE_API_KEY` environment variable and uses the `openai` Python library for API interactions. The `SKILL.md` and `README.md` files contain clear instructions for setup and usage, including a diagnostic `curl` command, but no evidence of prompt injection attempts, data exfiltration, malicious execution, persistence mechanisms, or obfuscation. All observed behaviors are consistent with the stated purpose of a web search skill.
能力评估
Purpose & Capability
Name/description, the Python script, and README align: this is a DashScope/Qwen web-search client. The required binary (python3) and dependency (openai Python package) are appropriate. However, the registry metadata declares no required environment variables while the code and README clearly expect DASHSCOPE_API_KEY — this mismatch reduces trust in the manifest.
Instruction Scope
SKILL.md instructs the agent to run the included script and to always use the tool for real-time info. The instructions do not ask the agent to read unrelated files or secrets beyond the API key and do not instruct transmission to unexpected endpoints. A rule in SKILL.md forbids revealing API keys.
Install Mechanism
There is no automated install step (instruction-only with a bundled script). README suggests installing the public 'openai' Python package via pip and setting an env var — a standard, low-risk approach. No downloads from untrusted URLs or archive extraction are present.
Credentials
The code reads DASHSCOPE_API_KEY from the environment and the README instructs the user to set it, but the skill registry metadata does not declare any required environment variables or a primary credential. That incoherence is problematic: the skill needs a secret to function, and the manifest should declare it so users and the platform can make an informed decision. Aside from that single key, no other credentials are requested, which is proportionate to the stated purpose.
Persistence & Privilege
The skill does not request elevated or persistent platform privileges (always:false). It does not modify other skills or system settings and appears to be user-invocable only — appropriate for its function.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install dashscope-web-search
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /dashscope-web-search 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
- Initial release of the DashScope Web Search skill. - Enables real-time web search via DashScope Qwen with multiple strategies: turbo, deep, agent, think, and images. - Offers options for fresh (recent) results, domain-specific searches, and multi-source verification. - Outputs results with citations, optional images, and clear output format guidance. - Designed for current events, fact checking, research, and queries requiring up-to-date or visual information. - Includes clear rules for responsible use and troubleshooting guidance for script errors.
元数据
Slug dashscope-web-search
版本 1.0.0
许可证
累计安装 8
当前安装数 8
历史版本数 1
常见问题

DashScope Web Search 是什么?

Search the web for real-time information using DashScope Qwen. Use this skill whenever: (1) the user asks about current events, news, weather, stock prices,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1209 次。

如何安装 DashScope Web Search?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install dashscope-web-search」即可一键安装,无需额外配置。

DashScope Web Search 是免费的吗?

是的,DashScope Web Search 完全免费(开源免费),可自由下载、安装和使用。

DashScope Web Search 支持哪些平台?

DashScope Web Search 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 DashScope Web Search?

由 Jeffrey(@oreo992)开发并维护,当前版本 v1.0.0。

💬 留言讨论