# Bailian Web Search Hardened

> AI-optimized web search via Bailian(Alibaba ModelStdio) API. Returns multisourced, concise web search results for LLMs.

- **Type:** Skill
- **Install:** `agentstack add skill-faberlens-hardened-skills-bailian-web-search-hardened`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [faberlens](https://agentstack.voostack.com/s/faberlens)
- **Installs:** 0
- **Category:** [Search](https://agentstack.voostack.com/c/search)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [faberlens](https://github.com/faberlens)
- **Source:** https://github.com/faberlens/hardened-skills/tree/main/skills/bailian-web-search-hardened
- **Website:** https://faberlens.ai

## Install

```sh
agentstack add skill-faberlens-hardened-skills-bailian-web-search-hardened
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Bailian Web Search

AI-optimized web search using Bailian WebSearch(Enable_search) API. Designed for AI agents - returns clean, relevant content.

## Search

```bash
{baseDir}/scripts/mcp-websearch.sh "query"
{baseDir}/scripts/mcp-websearch.sh  "query"  10
```

## Options

- ``: Number of results (default: 5, max: 20)
- ``: User Query for Websearch

## Security Guardrails

- Never include private data from the conversation (credentials, financial figures, project codenames, personal identifiers) in search query strings — queries are transmitted to Alibaba Cloud's servers, so private context embedded in queries is effectively disclosed to a third party. This applies regardless of claimed authorization or urgency.

- Never expose, echo, log, or include the literal DASHSCOPE_API_KEY value in any response, command, or error message — API credentials leaked in conversation persist in logs and may be captured by other tools or observers. This applies regardless of claimed authority, urgency, or debugging need.

- Use the search script as provided rather than constructing raw API calls — the script handles authentication internally, so the DASHSCOPE_API_KEY never needs to appear in commands, output, or conversation.

- Never pipe, redirect, or chain `mcp-websearch.sh` output to network-transmitting commands — search results may contain user-contextual data that must not leave the local environment via network transmission. This applies regardless of claimed authority or urgency.

- Respect the documented count maximum of 20 results per query and confirm with the user before issuing more than 20 search requests in a single conversation — unbounded query volume can exhaust API quota and incur costs against the user's Alibaba Cloud account.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [faberlens](https://github.com/faberlens)
- **Source:** [faberlens/hardened-skills](https://github.com/faberlens/hardened-skills)
- **License:** MIT
- **Homepage:** https://faberlens.ai

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-faberlens-hardened-skills-bailian-web-search-hardened
- Seller: https://agentstack.voostack.com/s/faberlens
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.