← 返回 Skills 市场
Metaso Search V2
作者
xinmh1338863
· GitHub ↗
· v2.1.0
1170
总下载
0
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install metaso-search-v2
功能描述
提供对 Metaso 搜索 API 的直接访问，支持网页搜索、内容读取和智能问答功能
安全使用建议
This skill appears coherent: it requires only METASO_API_KEY and contacts Metaso endpoints (https://metaso.cn). Before installing, confirm you trust the Metaso service and the skill author (repository/homepage is empty), limit the API key's scope if possible, store the key securely, and consider testing in an isolated environment. If you need stronger assurance, ask the publisher for a repository URL or signed package so you can review provenance and updates.
功能分析
Type: OpenClaw Skill
Name: metaso-search-v2
Version: 2.1.0
The skill provides access to a third-party search API, handling API keys securely via environment variables and making network calls to hardcoded `https://metaso.cn` endpoints. However, the `metaso-api.js` file, specifically the `readWebPage` function, accepts an arbitrary `url` parameter without robust validation. This creates a potential Server-Side Request Forgery (SSRF) or Local File Inclusion (LFI) vulnerability if the Metaso API (to which the URL is proxied) is susceptible to such attacks, allowing a malicious agent prompt to potentially access internal resources or local files via the Metaso service.
能力评估
Purpose & Capability
Name/description (Metaso search, web reader, chat) match the actual implementation: the code calls Metaso API endpoints and requires only METASO_API_KEY. No unrelated services, binaries, or config paths are requested.
Instruction Scope
SKILL.md contains focused runtime instructions and example usage that map directly to the implemented functions. It does not instruct reading arbitrary local files, other environment variables, or exfiltrating data to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only install). Code files are provided but no installer or external download is used; risk from install mechanism is low.
Credentials
Only METASO_API_KEY is required and used by the code (Authorization header). The number and nature of environment variables is proportional to the stated purpose.
Persistence & Privilege
Skill is not forced-always, is user-invocable, and does not request elevated/platform-wide privileges or modify other skills' configs. Autonomous invocation is allowed (platform default) and is not combined with other red flags.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install metaso-search-v2 - 安装完成后，直接呼叫该 Skill 的名称或使用
/metaso-search-v2触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.1.0
优化技能架构，移除默认API密钥，简化配置管理，更新文档结构
元数据
常见问题
Metaso Search V2 是什么？
提供对 Metaso 搜索 API 的直接访问，支持网页搜索、内容读取和智能问答功能. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1170 次。
如何安装 Metaso Search V2？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install metaso-search-v2」即可一键安装，无需额外配置。
Metaso Search V2 是免费的吗？
是的，Metaso Search V2 完全免费（开源免费），可自由下载、安装和使用。
Metaso Search V2 支持哪些平台？
Metaso Search V2 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Metaso Search V2？
由 xinmh1338863（@xinmh1338863）开发并维护，当前版本 v2.1.0。
推荐 Skills