Security Audit

baidu-scholar-search

github.com/openclaw/skills

AI SkillCommit 13146e6a3d46

CAUTION

Scanned 2 months ago

Critical

Immediate action required

High

Priority fixes suggested

Medium

Best practices review

Low

Acknowledged / Tracked

Trust Assessment

baidu-scholar-search received a trust score of 72/100, placing it in the Caution category. This skill has some security considerations that users should review before deployment.

SkillShield's automated analysis identified 1 finding: 1 critical, 0 high, 0 medium, and 0 low severity. Key findings include Unsafe interpolation of user input into shell command.

The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.

Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.

Layer Breakdown

Manifest Analysis

100%

Static Code Analysis

100%

Dependency Graph

100%

LLM Behavioral Safety

70%

Behavioral Risk Signals

Network Access

1 finding

Shell Execution

1 finding

Dynamic Code

1 finding

Security Findings1

Severity	Finding	Layer	Location
CRITICAL	Unsafe interpolation of user input into shell command The `wd`, `pageNum`, and `enable_abstract` parameters are directly interpolated into a `curl` command's URL string without proper URL encoding or shell escaping. This allows an attacker to inject arbitrary shell commands by crafting malicious input for these parameters, leading to remote code execution. For example, if `wd` contains shell metacharacters like `;`, `\|`, `&`, or `$(...)`, these will be interpreted by the shell before the `curl` command is executed, potentially executing arbitrary commands on the host system. Modify the `curl` command to use the `-G` (for GET requests) and `--data-urlencode` options. These options automatically handle URL encoding of parameter values, preventing shell metacharacters from being interpreted as commands. Example remediation: ```bash curl -s -X GET \ -H "Authorization: Bearer $BAIDU_API_KEY" \ -G \ --data-urlencode "wd=$WD" \ --data-urlencode "pageNum=$pageNum" \ --data-urlencode "enable_abstract=$enable_abstract" \ "https://qianfan.baidubce.com/v2/tools/baidu_scholar/search" ```	LLM	baidu_scholar_search.sh:22

Scan History

Embed Code

[![SkillShield](https://skillshield.io/api/v1/badge/69e79a4c393c7fef.svg)](https://skillshield.io/report/69e79a4c393c7fef)