by 安全扫描
OpenClaw
安全
high confidenceThe skill is internally consistent: a small Python CLI that calls the Yep Search API and only requires the YEP_API_KEY and python3 as declared.
评估建议
This skill appears to do exactly what it says: run a small Python script that queries the Yep Search API. Before installing, ensure you keep your YEP_API_KEY secret (don’t paste it into public prompts), be aware that API calls may incur charges and are rate-limited, and confirm you trust platform.yep.com. Because the skill can make outbound network requests, only provide the API key to agents you trust. If you need stronger isolation, run the script manually in a controlled environment rather th...详细分析 ▾
✓ 用途与能力
Name/description, required binary (python3), required env var (YEP_API_KEY), and included script all align with providing Yep Search queries. Nothing requested is unrelated to web search.
✓ 指令范围
SKILL.md instructs running the included scripts/search.py with arguments; the script only builds a JSON body and POSTs to https://platform.yep.com/api/search. It does not read other files, system secrets, or contact unexpected endpoints.
✓ 安装机制
No install spec — instruction-only usage with a bundled Python script. No downloads, package installs, or archive extraction; risk from install mechanism is minimal.
✓ 凭证需求
Only YEP_API_KEY is required and declared as the primary credential. The script only reads that env var; there are no other credential or config path requests.
✓ 持久化与权限
always is false (no forced persistence). The skill does not modify other skills or system settings; it runs as a simple CLI tool and does not request elevated presence.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv0.0.12026/3/21
- Initial release of yep-search: web search using the Yep Search API with an independent index. - Supports search result filtering by domain, date ranges, safe search, and language. - Allows fetching content highlights for results. - Command-line interface with multiple options for customizing queries and results. - No external dependencies; requires only Python 3.8+ and an API key.
● 无害
安装命令
点击复制官方npx clawhub@latest install yep-search
镜像加速npx clawhub@latest install yep-search --registry https://cn.longxiaskill.com