全国招中标信息、政府采购项目查询-保标招标

全国招标中标采购信息搜索 - 保标招标 - 支持多条件筛选的招投标数据搜索，返回项目金额、甲方、乙方、代理机构、采集源网址等核心字段。

This skill appears to do what it says: it sends POST requests to an external bidding API and returns results. Before installing: (1) Verify the API key source and obtain the key from a trusted channel; (2) Confirm the API domain (SKILL.md uses https://gate.gov-bid.com while the package homepage is https://www.bog-bid.com) — ask the publisher if these domains are correct; (3) Note the registry metadata does not list BID_API_KEY even though SKILL.md and the script require it — ensure the platform will prompt for/stores the key securely; (4) Review the included script (it is readable and only calls the API) and test in a sandbox environment; (5) Use environment-variable or platform credential storage, restrict and rotate the key, and monitor usage. If you cannot verify the publisher or the domain mismatch, treat the credential as sensitive and delay installation.

Type: OpenClaw Skill Name: sbkj-bidsearch Version: 1.0.1 The skill is a legitimate API wrapper for searching Chinese bidding and procurement information via the 'gov-bid.com' service. The Python script `scripts/bid_search.py` and the documentation in `SKILL.md` are well-structured, include explicit security warnings about external data transmission, and use standard libraries (`requests`) to communicate with the designated endpoint (gate.gov-bid.com). No evidence of data exfiltration, malicious execution, or prompt injection was found.