searxng-tool-for-openclaw

Install an OpenClaw plugin that adds SearXNG-powered web search without paid search APIs.

Security Scan

The skill's code, instructions, and install steps align with its stated purpose (an OpenClaw plugin that queries a SearXNG instance); it requests no credentials and contains no obvious exfiltration or unrelated actions.

Purpose & Capability

The name/description (SearXNG plugin for OpenClaw) matches the required artifacts: OpenClaw binary/config and an npm package that provides the plugin. Required config (~/.openclaw/openclaw.json) and anyBins: openclaw are coherent with the claimed purpose.

Instruction Scope

SKILL.md limits instructions to installing the npm package (via OpenClaw or npx), adding the plugin entry to OpenClaw config, and restarting. The runtime instructions and the index.ts source only construct and fetch JSON from a user-configured SearXNG baseUrl; they do not read unrelated files or request unrelated system state.

Install Mechanism

Installation uses npm (node) packages: openclaw and searxng-tool-for-openclaw. npm is a reasonable distribution mechanism here, but npx executes remote package code at install time—this is standard for JS tools but worth auditing the package source before running npx or installing globally.

Credentials

The skill requires no environment secrets or external credentials. The only config referenced is the OpenClaw config file (plugin entry) and a SearXNG baseUrl supplied via that config. Nothing requests unrelated tokens or secrets.

Persistence & Privilege

The skill is not always-enabled and does not request elevated system privileges or modifications to other skills' configurations. The plugin registers itself optionally with the OpenClaw API, which is appropriate for a plugin.

Assessment

This skill appears to do what it says: add a SearXNG-backed search tool for OpenClaw. Before installing: ensure you have OpenClaw installed and understand where the plugin will be added (~/.openclaw/openclaw.json). If you plan to use the npx installer, review the npm package repository (the provided GitHub link) because npx executes package code at install time. Configure baseUrl to a SearXNG instance you control (default is localhost). No credentials are required by the plugin, but as a general precaution only install packages from sources you trust and restart OpenClaw after changing plugin configuration.

This skill bundle points users at the npm package for the actual OpenClaw plugin.

What it installs

The published npm package contains:

• the OpenClaw plugin entry declared in openclaw.extensions
• the openclaw.plugin.json manifest used for validation
• an executable installer so npx searxng-tool-for-openclaw install works

Recommended install paths

Install the plugin directly from npm through OpenClaw:

openclaw plugins install searxng-tool-for-openclaw

Or use the package's installer binary:

npx searxng-tool-for-openclaw install

Required runtime

• OpenClaw installed and available on your machine
• A reachable SearXNG instance with JSON output enabled

Minimal config

Add the plugin entry to your OpenClaw config and point it at your SearXNG base URL.

{
  "plugins": {
    "entries": {
      "searxng-tool": {
        "enabled": true,
        "config": {
          "baseUrl": "http://127.0.0.1:8888"
        }
      }
    }
  }
}

After install or config changes, restart the gateway.