ZhiPu Search

智谱搜索，调用智谱 Web Search API，支持多引擎（智谱标准/高阶/搜狗/夸克），返回结构化结果，适合大模型处理。

This skill appears to do what it says (call Zhipu web_search with an API key), but review the following before installing: - The SKILL.md message 'do not read/output/modify config.json' contradicts the script, which will read ../config.json if ZHIPU_API_KEY is not set. Confirm whether you want the key in an env var only, or allow a local config.json file. If you keep a config.json, store it outside version control and restrict filesystem permissions. - The script calls open.bigmodel.cn over HTTPS; ensure you trust that endpoint and the API key provider. Keep your ZHIPU_API_KEY secret and do not paste it into public repos or logs. - The SKILL.md and code have a small path mismatch (SKILL.md mentions /paas/v4/web_search while the code posts to /api/paas/v4/web_search). This is likely benign but worth verifying against provider docs/test calls. - If you require stronger guarantees that the key will not be read from disk, modify the script to refuse falling back to config.json. If you are not comfortable with the config.json fallback, run the script in an environment where ZHIPU_API_KEY is set and no config.json is present, or edit the script to remove the fallback. Reviewing the code is straightforward (it's short) and recommended before use.

Type: OpenClaw Skill Name: zhipu-ai-search Version: 1.0.0 The skill is a legitimate implementation for interacting with the Zhipu AI Web Search API. The Node.js script (scripts/search.js) uses standard libraries to perform authenticated HTTPS requests to the official endpoint (open.bigmodel.cn) and includes safety instructions in SKILL.md to prevent the AI agent from leaking sensitive API keys.