Qianfan KnowledgeBase Search

Search knowledge from Qianfan Knowledgebase. Use this when you need to retrieve information from user's private knowledge bases on Baidu Qianfan platform.

This skill appears to do exactly what it says: run a local Python script that calls the Baidu Qianfan knowledgebase search API. Before installing, consider: (1) you must provide BAIDU_API_KEY — treat it as sensitive and prefer a key with minimized scope/permissions; (2) queries and returned content (including any sensitive KB data you request) will be transmitted to qianfan.baidubce.com, so ensure you trust Baidu Qianfan and the environment; (3) the skill will fail unless you provide knowledgebase IDs either in the request or via QIANFAN_KNOWLEDGEBASE_IDS env var — the registry and SKILL.md disagree on whether that env var is required; (4) publisher provenance is not shown (no homepage/source), so if you need stronger assurance, obtain the script directly from a trusted source or inspect it yourself (the included search.py is short and readable). If those points are acceptable, the skill is internally consistent.

Type: OpenClaw Skill Name: qianfan-knowledgebase-search Version: 1.0.1 The skill is designed to search knowledge from Baidu Qianfan Knowledgebase. It correctly uses environment variables `BAIDU_API_KEY` and `QIANFAN_KNOWLEDGEBASE_IDS` as declared in `SKILL.md` and accesses them via `os.getenv` in `search.py`. The `search.py` script makes a single, specific POST request to `https://qianfan.baidubce.com/v2/knowledgebases/search`, which is consistent with its stated purpose. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. All actions are clearly aligned with the skill's description.