baidu-search
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to
qianfan.baidubce.comto retrieve search results. This target is the official API endpoint for Baidu's AI Search service, which is a well-known technology provider. - [DATA_EXFILTRATION]: The script
scripts/search.pytransmits search queries and an authorization token to Baidu's infrastructure. This is a primary functional requirement of the skill and targets a well-known service domain. - [SAFE]: Authentication is handled via the
BAIDU_API_KEYenvironment variable. The skill provides documentation inreferences/apikey-fetch.mdfor proper configuration, adhering to safe credential management practices. - [SAFE]: The skill processes external search data from the Baidu API.
- Ingestion points: API response data in
scripts/search.py. - Boundary markers: The output is formatted as structured JSON to provide separation between data and instructions.
- Capability inventory: Network operations via
requests.postto a well-known service. - Sanitization: Results are parsed, filtered for specific keys, and serialized as JSON before being returned to the agent.
Audit Metadata