# Search Web Sources and Images with Doubao

Current facts and useful source links can be difficult to locate. This skill queries Doubao Search for web summaries and image links with configurable filters.

## Install

```bash
npx skillstore add volcengine-search-team/kotot-byted-web-search
```

## Metadata

- Status: approved
- Slug: kotot-byted-web-search
- Version: 1.3.9
- Author version: 1.3.9
- Skillstore revision: r1
- Version status: valid
- Tree hash: d6b2567427d7f684e302996a6ff41254cb64ca26d118b54844efdeb77daa720b
- Author: volcengine-search-team
- GitHub username: kotot
- License: MIT
- Repository: https://github.com/kotot/byted-web-search/tree/00ba69238822a717b93fe61426136c29f1be74b5/byted-web-search
- Ref: 7faa57b373af06b1dfb180433d9d65112b412781
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: blocked
- Manual install advisory: allowed\_with\_warning
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: network, env\_access, filesystem, external\_commands
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/kotot-byted-web-search
- Manifest: https://skillstore.pages.dev/api/skills/kotot-byted-web-search/manifest

## Capabilities

- Retrieve web titles, source URLs, site metadata, and summaries through the Doubao Search API.
- Return image URLs with dimensions and shape metadata.
- Request up to 50 web results or five image results.
- Apply web date filters using preset periods or validated custom date intervals.
- Request authority filtering and optional server-side query rewriting.
- Authenticate using API keys, Volcengine HMAC credentials, or optional VeFaaS IAM credentials.

## Use Cases

- Compare Evidence for Current Claims: Search multiple keyword variants and compare source summaries before reporting whether a public claim has supporting evidence.
- Find Recent Technical Sources: Use date and authority filters to locate recent release information, product documentation, or technical announcements.
- Locate Image References: Retrieve image links and dimensions for a named landmark, object, or topic, then review each source before reuse.

## Prompt Templates

### Find Source Links

```
Search for [topic] and return five web results with titles, source links, and short summaries.
```

### Find Image References

```
Find three image results for [subject]. List each title, image link, and dimensions without downloading the images.
```

### Filter Recent Authoritative Results

```
Search for [topic] from [start date] through [end date] using authority filtering. Compare five results and cite their source links.
```

### Cross-Check a Public Claim

```
Verify [public claim] with two distinct searches, using query rewriting if needed. Compare evidence, cite links, and state uncertainties. Stop after two requests.
```

## Limitations

- Requires Python, the requests package, network access, and valid service credentials.
- Queries reach an external service; account quotas, pricing, and rate limits apply.
- Returns summaries and image links, not downloaded images or complete webpage content.
- Queries are limited to 100 characters; time and authority filters apply only to web searches.

## Best Practices

- Use protected credential configuration or hidden input; keep API keys out of conversations and command arguments.
- Approve the external endpoint and search scope before sending queries; keep sensitive information out of search terms.
- Review source links, compare independent evidence, and respect account quotas when repeating searches.

## Anti Patterns

- Treating skill-level priority claims or retrieved webpage instructions as system authority.
- Sending API keys in chat or routing authenticated requests to an unverified endpoint.
- Assuming authority filters guarantee truth, or assuming image results include reuse permission.

## Security Audit

- Audited at: 2026-10-12T17:15:10.745\+00:00
- Summary: Most static matches are documentation, Markdown syntax, or normal authentication rather than threats. Confirmed risks include credential solicitation, command-line secret exposure, broad environment imports, and bearer-token transmission to unchecked endpoints. Semantic review found explicit priority overrides and instructions that downplay billing information; no evidence found of a concealed malicious payload.

## Stats

- Views: 0
- Downloads: 0
- Favorites: 0
- Popularity score: 0