← 返回 Skills 市场
baidu-web-search
作者
TobeyRebecca
· GitHub ↗
· v1.0.0
· MIT-0
82
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install toby-baidu-web-search
功能描述
Use SkillBoss API Hub web search for real-time web retrieval. Use when the user needs to search the web, get latest news, verify facts, or expresses intent l...
安全使用建议
This skill appears to do what it says: run a Node script that queries the SkillBoss search API using SKILLBOSS_API_KEY. Before installing: (1) Verify you trust the endpoint (https://api.heybossai.com) and the SkillBoss service; (2) Do not paste your API key into public channels — follow the platform secret/skill configuration UI so it is injected as an environment variable, or place config.json in a secure, local-only location; (3) Note the name 'baidu-web-search' is misleading — the backend is SkillBoss, not the official Baidu search API; (4) Rotate the key if you ever shared it in chat or logs; (5) If you need higher assurance, review the GitHub repo linked in the SKILL.md and confirm the maintainer and code match your security expectations.
功能分析
Type: OpenClaw Skill
Name: toby-baidu-web-search
Version: 1.0.0
The skill provides legitimate web search functionality using the SkillBoss API (api.heybossai.com). The implementation in scripts/search.js is transparent, handling API requests via axios and resolving credentials from environment variables or a local config file. Notably, SKILL.md contains extensive defensive instructions designed to prevent the AI agent from leaking or exposing the SKILLBOSS_API_KEY, which is a security best practice for protecting credentials in agentic workflows.
能力评估
Purpose & Capability
The skill says 'baidu-web-search' in its name but the implementation and SKILL.md clearly call the SkillBoss API Hub (https://api.heybossai.com). Functionality (real-time web search) aligns with the required API key and the single script included, but the name could mislead users expecting the official Baidu search API.
Instruction Scope
The SKILL.md limits runtime behavior to executing node scripts/search.js and explicitly forbids reading or printing the API key. The included script follows that model (reads only env var or local config.json). One noteworthy risk: the guide suggests providing the API key in conversation to have OpenClaw write config, which may expose the key if done in a non-private/logged context — the skill warns about this, but users must follow that guidance carefully.
Install Mechanism
No install script is embedded; package.json lists only axios as a dependency. No unusual or remote downloads, no extract-from-arbitrary-URL install steps. Typical npm dependency model (low risk).
Credentials
Only one credential is requested: SKILLBOSS_API_KEY, which is the expected secret for calling the SkillBoss API. The script reads that env var and falls back to a local config.json — behavior matches the declared requirement.
Persistence & Privilege
Skill does not request always:true and does not attempt to modify other skills or system-wide settings. It only reads its own config.json or environment variable and runs a single script.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install toby-baidu-web-search - 安装完成后，直接呼叫该 Skill 的名称或使用
/toby-baidu-web-search触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
baidu-web-search 1.0.0 – Initial Release
- Provides real-time web search using the SkillBoss API Hub with structured results for user queries.
- Strict privacy and security controls: API Key is never read, shown, output, or shared by the skill; only scripts/search.js can access it.
- Supports both OpenClaw/ClawHub (via environment variable) and self-hosted/local (via config.json); environment variable is prioritized.
- Detailed setup instructions for different platforms and strict usage guidelines to ensure credential safety.
- Returns JSON-formatted search results for user queries; callers should generate informative, source-based answers using these results.
元数据
常见问题
baidu-web-search 是什么？
Use SkillBoss API Hub web search for real-time web retrieval. Use when the user needs to search the web, get latest news, verify facts, or expresses intent l... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 82 次。
如何安装 baidu-web-search？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install toby-baidu-web-search」即可一键安装，无需额外配置。
baidu-web-search 是免费的吗？
是的，baidu-web-search 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
baidu-web-search 支持哪些平台？
baidu-web-search 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 baidu-web-search？
由 TobeyRebecca（@tobeyrebecca）开发并维护，当前版本 v1.0.0。
推荐 Skills