Back to plugin

Security audit

Openclaw Search

Security checks across malware telemetry and agentic risk

Overview

The package appears to be a straightforward OpenClaw/ClawHub wrapper around an AIsa-backed search client that requires a single AISA_API_KEY and Python; the main inconsistencies are metadata mismatches (registry vs embedded manifests) but the code and instructions are coherent with the stated purpose.

This package looks like a normal wrapper around an AIsa search client, but check two things before installing: (1) verify which metadata the platform honors — the embedded manifests require python3 and an AISA_API_KEY even though the top-level registry summary omitted them; (2) treat your AISA_API_KEY like any secret: only provide a key scoped minimally for search queries, and review the bundled scripts (skills/openclaw-search/scripts/search_client.py) to confirm it only talks to api.aisa.one. If you need higher assurance, ask the publisher to fix the registry metadata so required binaries and env vars are consistent, and confirm there are no additional network endpoints or hidden behaviors in the truncated portion of the script.

VirusTotal

No VirusTotal findings

View on VirusTotal

Static analysis

No suspicious patterns detected.