omnisearch

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: omnisearch Version: 1.0.0 The OpenClaw AgentSkills skill bundle for 'omnisearch' appears benign. The `SKILL.md` file provides clear instructions for the AI agent on when and how to use the web search tool, including troubleshooting steps like `chmod +x ./scripts/omnisearch.sh`, which are legitimate for skill management. The `scripts/omnisearch.sh` script is a simple wrapper that calls the internal `mcporter` command to perform web searches, passing the query directly. There is no evidence of intentional harmful behavior such as data exfiltration, unauthorized remote control, persistence, or malicious prompt injection attempting to subvert the agent's core functions beyond its stated purpose of web searching.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Your agent may run this search tool automatically for current-information requests rather than asking before using the web.

Why it was flagged

The skill uses forceful language that directs the agent to prefer this tool whenever current information or web search is involved.

Skill content
MANDATORY web search tool... This is THE ONLY way to search the internet... ALWAYS use this skill
Recommendation

Use it only if you want automatic web search behavior; edit or disable the skill if you prefer the agent to ask before searching.

What this means

Search terms, locations, names, or other details included in a query may be shared with the configured search provider.

Why it was flagged

The wrapper forwards the user-provided query through the mcporter gateway to a selected search provider, which is expected for search but means query text may leave the local environment.

Skill content
mcporter call omnisearch.ai_search query="$QUERY" provider="$PROVIDER"
Recommendation

Avoid putting secrets, private identifiers, or sensitive personal data in search queries unless you trust the configured provider and gateway.

What this means

Installation checks may not warn you that mcporter is required, and the skill will depend on whatever mcporter setup is already available.

Why it was flagged

The metadata does not declare runtime requirements, while the included documentation and script depend on mcporter being present and configured.

Skill content
Required binaries (all must exist): none... No install spec — this is an instruction-only skill.
Recommendation

Verify that mcporter is installed from a trusted source and configured only for the search providers you intend to use.