← 返回 Skills 市场
79
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install smart-research
功能描述
多引擎搜索 + 多级降级抓取 + 结构化研究结果。零API Key，一键完成搜索+抓取+融合。
安全使用建议
This skill implements the advertised search+fetch features, but several red flags merit caution: (1) SKILL.md claims "local execution / no data collection" while the fetch fallback uses external services (r.jina.ai, crawl4ai, markdown.new, defuddle) — those requests will expose target URLs and possibly page contents to those services; verify you are comfortable with that data flow before using it on private/internal URLs. (2) The Execution block references scripts/smart_research.py but the repository manifest shows smart_research.py at the root — fix the script_path or adjust how you invoke it. (3) The skill expects a nonstandard binary 'uv' and uses 'uv pip' in docs; ensure you understand what 'uv' is and trust it before running install commands. (4) Dependency/version inconsistencies between SKILL.md and requirements.txt may cause installation/runtime errors. Recommended steps: review the fetcher implementations (how/when they call external endpoints), run the code in a sandboxed environment or behind a proxy, validate and pin the dependencies you will install, and avoid feeding private/internal URLs to this skill unless you have explicitly audited the remote services it uses.
功能分析
Type: OpenClaw Skill
Name: smart-research
Version: 1.0.0
The skill bundle contains a hardcoded local absolute path to a specific user's directory in `smart_research.py` (`/Users/xudequan/...`) for the Playwright executable, which is a significant non-portable flaw and reveals developer environment details. Additionally, the tool exfiltrates user-provided URLs to several third-party web services (r.jina.ai, markdown.new, and defuddle.md) for content extraction; while this aligns with the stated 'Zero API Key' functionality, it introduces privacy risks not fully addressed in the documentation. These issues appear to be unintentional bugs or artifacts of AI-assisted development rather than deliberate malicious intent.
能力标签
能力评估
Purpose & Capability
Name/description match the code: the package implements multi-engine search and a multi-stage fetch fallback chain. However there are oddities: the SKILL.md Execution block references script_path: scripts/smart_research.py but the manifest contains smart_research.py at the repository root (path mismatch). The metadata requires a binary named 'uv' (and SKILL.md uses 'uv pip install'), which is a nonstandard wrapper and may not be present on user systems — this is unusual but plausibly needed by the author's environment. Dependency/version lists differ between SKILL.md and requirements.txt (e.g. baidusearch and crawl4ai versions), which is inconsistent and may break installs.
Instruction Scope
The runtime instructions and code use multiple external fetch services (crawl4ai, r.jina.ai/Jina Reader, markdown.new, defuddle, Playwright). That implies the skill will send target URLs (and potentially page content) to third-party services during fetching. This contradicts repeated "privacy-first / no data collection / local execution" claims in the README/SKILL.md. Fetching arbitrary URLs is expected for this tool, but the use of external remote extractors means user content or target URLs can be transmitted off-device — the SKILL.md does not clearly state this data flow.
Install Mechanism
No formal install spec is present in the registry entry despite code files and an Execution YAML in SKILL.md listing dependencies. The SKILL.md expects use of a nonstandard 'uv' command to install packages (e.g. 'uv pip install --system -r requirements.txt'); requiring the 'uv' binary and its usage is unusual and may hide platform-specific behavior. There is no download-from-URL or archive-extract risk in the manifest, but the mismatch between declared dependencies in SKILL.md and requirements.txt (different package names/versions) is a practical installation risk.
Credentials
The skill does not request credentials and declares no required env vars (primaryEnv none). SKILL.md documents optional environment variables (HTTP_PROXY, HTTPS_PROXY, TIMEOUT, PLAYWRIGHT_HEADLESS), which are reasonable for a networked fetcher. No secret-exfiltration patterns were declared, but the skill will perform network requests to third-party services — users should treat that as potential data exposure.
Persistence & Privilege
always is false and the skill does not request elevated or persistent platform privileges. It does not modify other skills' configs per the provided files. Autonomous invocation is allowed (default) which is normal and not flagged on its own.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install smart-research - 安装完成后，直接呼叫该 Skill 的名称或使用
/smart-research触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
smart-research v1.0.0
- Initial release with multi-engine search (Baidu, DuckDuckGo, Bing) and automatic fallback.
- Multi-layer fallback fetching: crawl4ai, Jina, markdown.new, defuddle, and Playwright.
- Delivers structured research output with metadata (title, body, href, source, fetch method, timestamp).
- No API keys required; operates fully free of charge.
- Single entry point with `research()`, supports `search`, `fetch`, and `deep_search` actions.
- Robust error handling with fallback and partial result support.
元数据
常见问题
smart-research 是什么？
多引擎搜索 + 多级降级抓取 + 结构化研究结果。零API Key，一键完成搜索+抓取+融合。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 79 次。
如何安装 smart-research？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install smart-research」即可一键安装，无需额外配置。
smart-research 是免费的吗？
是的，smart-research 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
smart-research 支持哪些平台？
smart-research 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 smart-research？
由 xx235300（@xx235300）开发并维护，当前版本 v1.0.0。
推荐 Skills