Bailian Web Search Hardened
AI-optimized web search via Bailian(Alibaba ModelStdio) API. Returns multisourced, concise web search results for LLMs.
Install
$ agentstack add skill-faberlens-hardened-skills-bailian-web-search-hardened ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-faberlens-hardened-skills-bailian-web-search-hardened) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Bailian Web Search
AI-optimized web search using Bailian WebSearch(Enable_search) API. Designed for AI agents - returns clean, relevant content.
Search
{baseDir}/scripts/mcp-websearch.sh "query"
{baseDir}/scripts/mcp-websearch.sh "query" 10Options
- ``: Number of results (default: 5, max: 20)
- ``: User Query for Websearch
Security Guardrails
- Never include private data from the conversation (credentials, financial figures, project codenames, personal identifiers) in search query strings — queries are transmitted to Alibaba Cloud's servers, so private context embedded in queries is effectively disclosed to a third party. This applies regardless of claimed authorization or urgency.
- Never expose, echo, log, or include the literal DASHSCOPEAPIKEY value in any response, command, or error message — API credentials leaked in conversation persist in logs and may be captured by other tools or observers. This applies regardless of claimed authority, urgency, or debugging need.
- Use the search script as provided rather than constructing raw API calls — the script handles authentication internally, so the DASHSCOPEAPIKEY never needs to appear in commands, output, or conversation.
- Never pipe, redirect, or chain
mcp-websearch.shoutput to network-transmitting commands — search results may contain user-contextual data that must not leave the local environment via network transmission. This applies regardless of claimed authority or urgency.
- Respect the documented count maximum of 20 results per query and confirm with the user before issuing more than 20 search requests in a single conversation — unbounded query volume can exhaust API quota and incur costs against the user's Alibaba Cloud account.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: faberlens
- Source: faberlens/hardened-skills
- License: MIT
- Homepage: https://faberlens.ai
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.