DuckDuckGo(API)
v0.2.0Use when needing to search the web in AI coding tools or OpenClaw. Uses DuckDuckGo API without API key.
⭐ 0· 300·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (DuckDuckGo web search) align with the included Python script and SKILL.md. The code uses the ddgs package to perform web and news searches and exposes the same CLI options documented in SKILL.md. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs the agent to run the included script (uv run scripts/ddgs_search.py) and shows bash/python invocation examples; the instructions stay within the search task. The FAQ recommends installing 'uv' via a remote curl|sh installer (astral.sh), which introduces a network-download step outside the skill's code — this is an operational risk to be aware of but not evidence of malicious behavior in the skill itself.
Install Mechanism
There is no formal install spec in metadata (instruction-only + provided script). Dependencies are standard (ddgs, Python). SKILL.md recommends 'uv' and shows how to install it, including a curl|sh command that fetches code from https://astral.sh; downloading and executing remote install scripts is higher risk than using a package manager or pip, so prefer pip or verify the installer before running.
Credentials
The skill does not require any environment variables or secrets in its metadata. It optionally reads HTTP_PROXY/http_proxy/DDGS_PROXY to support proxies — reasonable given proxy support, but proxy URLs may contain credentials (user:pass@host) so those values should be treated as sensitive.
Persistence & Privilege
Skill does not request persistent/always-on presence, does not modify other skills or global agent config, and allows user invocation. It does not claim or require elevated privileges.
Assessment
This skill appears to do what it says: run DuckDuckGo searches via the ddgs Python package. Before installing or running: (1) avoid running unfamiliar curl|sh installers — prefer pip install ddgs or inspect the installer at https://astral.sh if you want 'uv'; (2) be cautious if you supply a proxy URL containing credentials (HTTP_PROXY or DDGS_PROXY), since those are sensitive and could be logged or transmitted to the proxy; (3) if you need stronger isolation, run the script in a sandbox or ephemeral environment; and (4) review the ddgs package and network egress policies if you have strict security requirements.Like a lobster shell, security has layers — review code before you run it.
latestvk976wnw93k7gxxyytdw2211kq183kt1e
License
MIT-0
Free to use, modify, and redistribute. No attribution required.