qianfan clawhub

Search and install Baidu Qianfan ecosystem skills with fuzzy matching across slug, name, and description fields

This tool largely does what it says — it searches Baidu's appbuilder and downloads skill zip files using your BAIDU_API_KEY. However, the included script will attempt an undocumented HTTP GET to http://localhost:4096/path and use its 'directory' field as the workspace when no workdir is provided; a malicious or compromised local service could point that to sensitive locations and cause files to be written there. Before installing or running: (1) read the script and consider removing or modifying the localhost call, (2) prefer running with an explicit --workdir you control (avoid relying on the default), (3) use a restricted BAIDU_API_KEY with minimal permissions, (4) run the tool in a sandboxed environment if possible, and (5) ask the author/maintainer to document and justify the localhost lookup or remove it.

Type: OpenClaw Skill Name: qianfan-clawhub Version: 1.0.1 The skill functions as a package manager for the Baidu Qianfan ecosystem, which inherently involves high-risk operations like downloading and executing remote code. A potential Zip Slip vulnerability exists in `scripts/qianfanclawhub.py` because the `install_skill` function does not sufficiently sanitize file paths within downloaded ZIP archives before extraction. Additionally, the script attempts to discover the local environment's directory structure by querying an undocumented local endpoint at `http://localhost:4096/path`.