首页 › 龙虾技能列表 › alphaear-search — 技能工具

alphaear-search — 技能工具

v1.0.0

Perform finance web searches and local context searches. Use when the user needs general finance info from the web (Jina/DDG/Baidu) or needs to retrieve fina...

0· 73·2 当前·2 累计
by @zhouzhonglu8-png·MIT-0
下载技能包
License
MIT-0
最后更新
2026/4/1
安全扫描
VirusTotal
无害
查看报告
OpenClaw
可疑
high confidence
The skill mostly implements a finance search + local RAG, but its code uses many undeclared environment credentials, heavy ML dependencies, network calls, and writes a local DB — the SKILL.md and registry metadata do not fully disclose this surface.
评估建议
This skill's code does more than a minimal web search helper: it will perform outbound network requests, may call external LLM providers if API keys exist in your environment, can download transformer/embedding models, and will create a local SQLite database. Before installing or enabling it: - Review and restrict environment variables: do not place high-privilege API keys (cloud credentials, wide-scope LLM keys) in the environment unless you trust the code. Prefer using a dedicated, limited-s...
详细分析 ▾
ℹ 用途与能力
Name/description (finance web + local RAG search) is broadly consistent with the code: SearchTools, Jina/DDG/Baidu adapters, and Local RAG exist. However the package also contains sentiment analysis, an LLM factory/router, and model capability tests that go beyond a minimal search helper. Those extra capabilities are plausible for a finance search product (sentiment scoring, LLM-driven summarization), but they increase the runtime footprint and credential needs compared to what's declared in the metadata and SKILL.md.
⚠ 指令范围
SKILL.md instructs using SearchTools for web/local search but does not mention that runtime code will: perform outbound HTTP requests to multiple external services (Jina, search engines), read many environment variables (various LLM provider keys, JINA_API_KEY, EMBEDDING_MODEL, SEARCH_CACHE_TTL, etc.), download large ML models (transformers / SentenceTransformer when BERT/vector modes are used), and write a local SQLite DB (default path data/signal_flux.db). The instructions do not enumerate those side-effects or the extra modules (sentiment, LLM routing) that may trigger network calls or model downloads.
ℹ 安装机制
There is no install spec (instruction-only in registry), but the skill bundle includes many Python source files requiring heavy third-party packages (sentence_transformers, transformers, sklearn, rank_bm25, agno.*, duckduckgo-search, etc.). The absence of an install script or declared dependencies means runtime may fail or implicitly perform network downloads (Hugging Face model pulls). This is not an outright malicious install vector, but it's a practical risk and an inconsistency with registry metadata.
⚠ 凭证需求
Registry lists no required env vars, yet the code reads many secrets and config variables (e.g., JINA_API_KEY, UST_KEY_API, DEEPSEEK_API_KEY, DASHSCOPE_API_KEY, OPENROUTER_API_KEY, ZAI_KEY_API, UST_URL, EMBEDDING_MODEL, BERT_SENTIMENT_MODEL, SENTIMENT_MODE, SEARCH_CACHE_TTL). Some are relevant for optional backends, but their presence is not documented in SKILL.md or metadata. That mismatch is a red flag: the skill can use any API key present in the environment to call external LLMs or services.
✓ 持久化与权限
The skill does not request always:true and does not modify other skills. It creates and writes a local SQLite DB (default data/signal_flux.db) and persists cached search results and daily_news entries; that is expected for a search/cache capability but should be disclosed. Autonomous invocation (disable-model-invocation=false) is the platform default and not by itself a concern.
安全有层次，运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发，无需署名。

运行时依赖

无特殊依赖

版本

latestv1.0.02026/4/1

AlphaEar Search Skill v1.0.0 - Introduces unified search for finance information via web (Jina, DDG, Baidu) and local document retrieval (RAG). - Supports engine selection for queries: web engines or local database. - Includes smart cache checking to avoid redundant searches. - Aggregates search results from multiple engines if needed. - Requires dependencies: duckduckgo-search, requests, and local script/database management.

● 无害

安装命令 点击复制

官方npx clawhub@latest install alphaear-search
镜像加速npx clawhub@latest install alphaear-search --registry https://cn.clawhub-mirror.com

技能文档

Overview

Unified search capabilities: web search (Jina/DDG/Baidu) and local RAG search.

Capabilities

1. Web Search

Use scripts/search_tools.py via SearchTools.

  • Search: search(query, engine, max_results)
- Engines: jina, ddg, baidu, local. - Returns: JSON string (summary) or List[Dict] (via search_list).
  • Smart Cache (Agentic): If you want to avoid redundant searches, use the Search Cache Relevance Prompt in references/PROMPTS.md. Read the cache first and decide if it's usable.
  • Aggregate: aggregate_search(query)
- Combines results from multiple engines.

2. Local RAG

Use scripts/hybrid_search.py or SearchTools with engine='local'.

  • Search: Searches local daily_news database.

Dependencies

  • duckduckgo-search, requests
  • scripts/database_manager.py (search cache & local news)
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制

免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制

了解定制服务