Performs web searches using DuckDuckGo to retrieve real-time information from the internet. Use when the user needs to search for current events, documentation, tutorials, or any information that requires web search capabilities.
v1.0.0Performs web searches using DuckDuckGo to retrieve real-time information from the internet. Use when the user needs to search for current events, documentation, tutorials, or any information that requires web search capabilities.
⭐ 40· 22.5k·232 current·244 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the runtime instructions: examples use the duckduckgo-search (DDGS) Python library to perform text, news, image, video, maps, suggestions, and instant-answer searches. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md contains concrete python -c examples that call DDGS API methods and some example scripts to save results. Instructions stay within web-search functionality and do not direct the agent to read unrelated system files or environment variables.
Install Mechanism
The registry has no formal install spec, but SKILL.md recommends installing the public PyPI package duckduckgo-search (pip install duckduckgo-search). Installing a PyPI package is a normal step for this skill, but pip installs execute code on disk (moderate risk compared to instruction-only).
Credentials
No environment variables, credentials, or config paths are required. The skill does not request unrelated secrets or elevated access.
Persistence & Privilege
always is false and the skill is user-invocable. It does not request persistent system-wide changes or modification of other skills' configs. Autonomous invocation is allowed by default but not excessive here.
Assessment
This skill appears to do what it claims: run DuckDuckGo searches using the duckduckgo-search Python library. Before installing or enabling it: (1) verify the PyPI package name and inspect its project page / source (typosquatting is possible); (2) prefer pinning a known good version (e.g., pip install duckduckgo-search==<version>); (3) avoid running pip as root in sensitive environments; (4) be aware that queries and returned URLs are sent/received over the network (DuckDuckGo is privacy-focused but your queries still leave the host); (5) if you are uncomfortable with the agent autonomously invoking network searches, restrict autonomous invocation or require user confirmation. If you want extra assurance, request the skill owner to provide an explicit install spec (trusted source or checksum) or a code review of the package before installation.Like a lobster shell, security has layers — review code before you run it.
latestvk97bn98ghzbew8wr249zep76p980fhtc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
