ClawHub

Brave Search

v0.1.0

Auto-generated skill for brave-search tools via OneKey Gateway.

⭐ 0· 81·0 current·0 all-time
by@ai-hub-admin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description (Brave Search via OneKey Gateway) matches the implementation: two small Python scripts that call OneKeyAgentRouter.invoke with api_id values 'brave_web_search' and 'brave_local_search'. Required packages (onekey gateway client and ai-agent-marketplace) align with the described gateway integration.
✓
Instruction Scope
The SKILL.md and the scripts limit actions to reading JSON input (from CLI argument or file), validating a 'query' field, and forwarding that payload to the OneKey Gateway. The scripts do not access other system files, environment variables beyond the gateway key, or contact arbitrary endpoints themselves (networking is via the OneKey client).
ℹ
Install Mechanism
There is no registry-level install spec, but SKILL.md instructs installing npm package '@aiagenta2z/onekey-gateway' and Python package 'ai-agent-marketplace' from standard registries. This is a typical, moderate-risk approach (packages come from public registries). It's odd that the registry metadata said 'no install spec' while SKILL.md contains install instructions.
ℹ
Credentials
The skill requires a single env var DEEPNLP_ONEKEY_ROUTER_ACCESS (OneKey Gateway API key), which is proportionate for a gateway-based search wrapper. Two points to note: (1) registry metadata earlier listed 'no required env vars' which conflicts with SKILL.md, and (2) both scripts fall back to a demo key ('BETA_TEST_KEY_MARCH_2026') if the env var is absent — that means queries may be routed through the maintainer's/demo service if you don't provide your own key.
✓
Persistence & Privilege
The skill does not request always:true, does not modify other skill configs, and has no special config path or system privileges. It is user-invocable and can be invoked autonomously by the model per platform defaults, which is expected for skills.
Assessment
This skill is a simple wrapper that sends your JSON payloads to the OneKey Gateway (brave_web_search or brave_local_search). Before installing: (1) confirm you trust the OneKey provider (deepnlp/aiagenta names shown) because queries and results transit their service; do not send sensitive secrets or private data through the skill; (2) prefer to set your own DEEPNLP_ONEKEY_ROUTER_ACCESS key rather than using the demo fallback key (demo usage routes traffic through the provider/demo account); (3) verify the referenced packages (@aiagenta2z/onekey-gateway and ai-agent-marketplace) come from the official projects you expect (check their repos) before pip/npm install; (4) be aware of the small manifest inconsistencies (registry metadata vs SKILL.md) — likely packaging sloppiness but worth noting. If you want stronger assurance, ask the publisher for repository/homepage and the provenance of the pip/npm packages.

Like a lobster shell, security has layers — review code before you run it.

latestvk97eg70jhmqbfj4smsbe02wwx983dh46

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments