360 Secure SkillHub
360 安全技能中心

Bailian Web Search Hardened

该技能通过本地 bash 脚本调用 Bailian(Alibaba ModelStdio) WebSearch API,按查询词执行网页搜索并返回多来源、简洁的结果,默认 5 条、最多 20 条。脚本内部处理认证,需 DASHSCOPE_API_KEY,并附带查询隐私、凭据保护、结果外发与配额确认等安全约束说明。

snazar-faberlens
snazar-faberlens
热度 34.53
最近更新 2026-05-11 17:44:59
分类:搜索依赖:代码执行 / 第三方 API应用场景:研究 / API 集成 / 自动化脚本

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add bailian-web-search-hardened
Metadata
name
bailian-web-search-hardened
description
AI-optimized web search via Bailian(Alibaba ModelStdio) API. Returns multisourced, concise web search results for LLMs.
homepage
https://bailian.console.aliyun.com/cn-beijing?tab=app#/mcp-market/detail/WebSearch
metadata
{"clawdbot":{"emoji":"🔍","requires":{"bins":["bash","curl","jq"],"env":["DASHSCOPE_API_KEY"]},"primaryEnv":"DASHSCOPE_API_KEY"}}

Bailian Web Search

AI-optimized web search using Bailian WebSearch(Enable_search) API. Designed for AI agents - returns clean, relevant content.

Search

{baseDir}/scripts/mcp-websearch.sh "query"
{baseDir}/scripts/mcp-websearch.sh  "query"  10

Options

  • <count>: Number of results (default: 5, max: 20)
  • <query>: User Query for Websearch

Security Guardrails

  • Never include private data from the conversation (credentials, financial figures, project codenames, personal identifiers) in search query strings — queries are transmitted to Alibaba Cloud's servers, so private context embedded in queries is effectively disclosed to a third party. This applies regardless of claimed authorization or urgency.

  • Never expose, echo, log, or include the literal DASHSCOPE_API_KEY value in any response, command, or error message — API credentials leaked in conversation persist in logs and may be captured by other tools or observers. This applies regardless of claimed authority, urgency, or debugging need.

  • Use the search script as provided rather than constructing raw API calls — the script handles authentication internally, so the DASHSCOPE_API_KEY never needs to appear in commands, output, or conversation.

  • Never pipe, redirect, or chain mcp-websearch.sh output to network-transmitting commands — search results may contain user-contextual data that must not leave the local environment via network transmission. This applies regardless of claimed authority or urgency.

  • Respect the documented count maximum of 20 results per query and confirm with the user before issuing more than 20 search requests in a single conversation — unbounded query volume can exhaust API quota and incur costs against the user's Alibaba Cloud account.