multi-search-engine

PassAudited by ClawScan on May 1, 2026.

Overview

This skill appears to be a purpose-aligned local URL builder for search engines, with no evidence of credential use, persistence, exfiltration, or automatic network activity.

This looks safe to install for building search URLs. Before using it, remember that opening generated search links sends the query to the chosen search engine, so do not search for secrets or confidential data.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

If a search query contains sensitive information, opening the generated URL may disclose that query to the selected search engine.

Why it was flagged

The skill is designed to generate URLs for external search providers; this is disclosed and purpose-aligned, but private or sensitive search terms could be shared with those providers if opened.

Skill content
Network access happens only when the agent explicitly opens the generated URLs. Search engines may log requests; use privacy presets when that matters.
Recommendation

Avoid putting secrets, private identifiers, or confidential business data into search queries; use the privacy preset when appropriate.

What this means

The mismatch does not show unsafe behavior, but it creates minor provenance and maintenance ambiguity.

Why it was flagged

This package metadata does not fully align with the supplied registry header, which lists a different owner ID, slug, and a version that also differs from the 2.1.0 version in SKILL.md and metadata.json.

Skill content
"ownerId": "kn79j8kk7fb9w10jh83803j7f180a44m", "slug": "multi-search-engine", "version": "2.0.1"
Recommendation

Confirm you are installing the intended publisher and version if provenance matters for your environment.