zhihu-search-api-skill — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited zhihu-search-api-skill (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
This skill uses BrowserAct's Zhihu Search API template to provide a one-stop article extraction service. It extracts structured article details and full content from Zhihu article search results based on keywords and publication date filters.
Before running, you need to check the BROWSERACT_API_KEY environment variable. If it is not set, do not take other actions; wait for the user to provide it. The Agent must inform the user at this time:
"Since you have not configured the BrowserAct API Key yet, please go to the BrowserAct Console first to get your Key."
The Agent should flexibly configure the following parameters according to user needs when calling the script:
stringAI agent, openclawstring7d: Past 7 days30d: Past 30 days90d: Past 90 days1y: Past yearall: Any time7dnumber10The Agent should execute the following independent script to achieve "one command gets results":
# Example call
python -u ./scripts/zhihu_search_api.py "keyword" "Publish_date" limitBecause this task involves automated browser operations, it may take a long time (several minutes). The script will continuously output status logs with timestamps (e.g., [14:30:05] Task Status: running) while running. Agent Must Know:
Upon successful execution, the script will directly parse and print the result from the API response. The result includes:
title: Full article titlebody_content: Full body content of the articleimage_url: Main image URL or article cover image URLauthor: Article author or publishing account namepublication_date: Article publication dateurl_link: Original article URLDuring the execution of the script, if an error is encountered (such as network fluctuations or task failure), the Agent should follow this logic:
"Invalid authorization", it means the API Key is invalid or expired. Do not retry at this time, and guide the user to check and provide the correct API Key."Invalid authorization" but the task execution fails (for example, the output starts with Error: or the return result is empty), the Agent should automatically try to execute the script once more.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.