智灵大数据搜索

使用智灵搜索进行数据查询。当用户说"使用智灵搜索"、"智灵搜索帮我查询"、"调用智灵搜索"、"用智灵搜索"、"智灵搜索查询"、"舆情数据"、"舆情"、"新闻报道"、"...评论"、"热点话题"、"动态"、"相关报道"、"最新趋势"等时使用此技能。首先检查Zeelin_Api_Key是否已配置，如果未配置则给出友好...

This skill appears to do what it says: convert user queries to JSON, sign requests, call a Zeelin search API, show results, and save the full JSON to a file. Before installing or using it: (1) verify the Zeelin_Api_Url/Zeelin_Website_Url you will configure are correct and trusted (the skill does not validate them); (2) avoid putting highly sensitive or reused secrets into the config file—use a dedicated API key; (3) be aware the API key will be sent as headers to the configured endpoint and the full API response will be written to your user directory (check where files are saved and who can read them); (4) if you are unsure about the configured endpoint, test with a non-privileged key or a safe staging URL first. If you want, I can help review the specific Zeelin_Api_Url you plan to use or suggest safer ways to store the key.

Type: OpenClaw Skill Name: zeelin-search-gsdata-es-bigdata Version: 1.0.0 The skill facilitates data queries via the 'Zeelin Search' API but exhibits several high-risk security flaws. The default configuration in 'templates/config.json' uses an unencrypted HTTP endpoint (http://search-skill.zeelin.cn:5000), which would transmit the 'Zeelin_Api_Key' and sensitive search queries in cleartext. Additionally, 'SKILL.md' and 'references/zenlin_search_api.md' instruct the AI agent to perform file-write operations to update its own configuration and save result files to the user's directory. While these actions appear intended for the stated functionality, the combination of insecure transport and automated file system modification warrants a suspicious classification.