← 返回 Skills 市场
246
总下载
2
收藏
0
当前安装
6
版本数
在 OpenClaw 中安装
/install tencenthotsearch-skill
功能描述
Fetches trending news and articles using Tencent Cloud Online Search API (SearchPro). Supports searching across the entire web or within specific sites, with...
安全使用建议
This skill appears to do what it says: sign requests and query Tencent's Online Search API, then write results to files. Before installing: (1) Verify the GitHub repository and that the distributed files match upstream; (2) Do not trust the registry metadata that claims no credentials — the code requires SecretId/SecretKey in config.json; (3) Use temporary / least-privileged Tencent API keys and run the skill in a container or VM; (4) Keep config.json out of version control and set restrictive permissions (chmod 600); (5) Review scripts/tencent_hotsearch.py yourself (it builds HMAC signatures and sends requests to wsa.tencentcloudapi.com); (6) Monitor network activity to confirm only the official endpoint is contacted; (7) If you need stronger assurance, ask the publisher for a signed release or checksums and a corrected registry metadata entry.
功能分析
Type: OpenClaw Skill
Name: tencenthotsearch-skill
Version: 1.0.5
The TencentHotSearch-skill is a legitimate utility for searching news and articles via the Tencent Cloud SearchPro API. The implementation in `scripts/tencent_hotsearch.py` is transparent, using only the Python standard library for network requests and HMAC-SHA256 signing, with no evidence of data exfiltration or malicious execution. The skill includes proactive security features such as path traversal protection and secret masking in logs, and it is accompanied by exceptionally thorough security documentation (`SECURITY.md`, `CONFIG.md`) that guides users on safe credential management and acknowledges potential metadata discrepancies.
能力评估
Purpose & Capability
The skill is a Tencent Cloud Search client and the code (scripts/tencent_hotsearch.py) requires Tencent SecretId/SecretKey in config.json and network access to wsa.tencentcloudapi.com. This is consistent with the described functionality. However, the registry metadata (as surfaced to the platform) incorrectly claims no credentials/config required — a documentation mismatch that the SKILL.md explicitly warns about.
Instruction Scope
SKILL.md and the included README/CONFIG/SECURITY docs instruct the agent to read a local config.json for credentials, call the Tencent SearchPro API, and write results to an output directory. The runtime instructions do not request unrelated system files, other service credentials, or external endpoints outside the official Tencent API. They also advise code review and isolated execution.
Install Mechanism
No install spec or external download is present; this is an instruction-only skill with bundled source files. Requirements.txt lists no non-stdlib dependencies (pandas optional). No archive downloads or third-party install hosts are used.
Credentials
The only required secrets are the Tencent SecretId and SecretKey stored in a config.json file — this is proportionate for calling Tencent's API. The skill writes output files to disk and performs network calls to the official endpoint. Note: storing credentials in a file has inherent risks (the project documents this and recommends chmod 600, .gitignore, temporary keys). Also flag the registry metadata inconsistency: platform-side metadata lists no credentials while SKILL.md/code require them.
Persistence & Privilege
No elevated persistence is requested (always:false). The skill does not modify other skills or global agent settings. It will be able to perform network calls and write files at runtime, which are necessary for its stated purpose.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install tencenthotsearch-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/tencenthotsearch-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.5
No code or documentation changes detected in this release.
- No changes identified between version 1.0.4 and 1.0.5.
- All files remain unchanged.
v1.0.4
No file or functional changes were detected in this release.
- Version updated to 1.0.4 with no modifications to files or documentation.
- No new features, bug fixes, or content updates included.
- Existing documentation, configuration, and security guidance remain unchanged.
v1.0.3
TencentHotSearch-skill 1.0.3
- Added required SKILL files: README.md, CONFIG.md, SECURITY.md, config.json, requirements.txt, and scripts.
- Declared explicit homepage and repository links in SKILL.md.
- Marked secret_id and secret_key as sensitive credentials in SKILL.md with user warnings.
- Updated permissions section to explicitly mark required network and file write access.
- Added comprehensive security notice and pre-install checklist to SKILL.md.
- Provided clear security feature summary and links to relevant documentation.
v1.0.2
- Removed all code and configuration files, including main script, configuration, and documentation files.
- Skill now only retains metadata and descriptive documentation (SKILL.md).
- Added a major security warning section in SKILL.md about credential/config requirements and safe usage practices.
- Users are alerted to a metadata/documentation mismatch regarding required credentials.
- Strong emphasis on manual review, using sandboxed environments, and best practices for secrets handling.
v1.0.1
TencentHotSearch-skill v1.0.1
- Added manifest metadata: required_credentials and permissions now clearly listed in SKILL.md.
- Removed files: config.example.json and examples/usage_examples.py.
- SKILL.md revised—now written in English, with credential and permission requirements specified.
- No functional changes to core search skill.
v1.0.0
- Initial release of TencentHotSearch-skill.
- Supports fetching trending news and articles using Tencent Cloud Online Search API (SearchPro).
- Allows multi-keyword search (1-5 keywords), with options for site-specific or full web searches.
- Supports three search modes (natural, multi-modal VR, hybrid), time and industry filtering, and multiple output formats (MD, JSON, CSV, TXT).
- Provides results with structured information including title, summary, source, publish time, link, relevance score, and images.
- Includes robust configuration options, error handling, and comprehensive usage instructions.
元数据
常见问题
Tencent Web Search API 是什么？
Fetches trending news and articles using Tencent Cloud Online Search API (SearchPro). Supports searching across the entire web or within specific sites, with... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 246 次。
如何安装 Tencent Web Search API？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install tencenthotsearch-skill」即可一键安装，无需额外配置。
Tencent Web Search API 是免费的吗？
是的，Tencent Web Search API 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Tencent Web Search API 支持哪些平台？
Tencent Web Search API 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Tencent Web Search API？
由 hanli（@neuhanli）开发并维护，当前版本 v1.0.5。
推荐 Skills