Web Search API

• Analyzed: May 11, 2026, 4:40 AM
• Findings: 1
• Version: 1.0.1
• Hash: c1ba843b5ebd02f38167f69bf287f07cc7a6eeb2a6a137f83892e45f142cd260
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills skill bundle for WebSearchAPI is designed to provide a multi-type search tool using SearchAPI.io. The code and documentation are consistent with this stated purpose. It stores the user-provided API key in a local `config.json` file and uses it to make HTTPS requests to `https://www.searchapi.io`. While storing API keys locally and sending them in URL query parameters (even over HTTPS) can be considered a vulnerability if the local system is compromised or URLs are logged, this is a common pattern for CLI tools and does not demonstrate malicious intent such as unauthorized data exfiltration, persistence, or malicious execution. The `SKILL.md` and `README.md` files provide clear instructions without any signs of prompt injection attempts to subvert the agent's behavior.