Back to skill
Skillv2.0.0

VirusTotal security

curl-search · External malware reputation and Code Insight signals for this exact artifact hash.

Scanner verdict

BenignApr 30, 2026, 6:17 AM
Hash
4e6acfe1021f8265d51d862d7bed4cd0a216c1a7af8fa90892ee6f3d603050de
Source
palm
Verdict
benign
Code Insight
Type: OpenClaw Skill Name: curlsearch Version: 2.0.0 The curlsearch skill is a legitimate utility for performing web searches via curl across multiple engines (Baidu, Google, Bing, DuckDuckGo). The implementation in scripts/search.sh includes proactive security measures such as input sanitization via a whitelist-based sed command and URL encoding using python3. While the Python-based encoding logic could theoretically be vulnerable to injection, the script correctly applies the sanitizer beforehand to remove dangerous characters. No evidence of data exfiltration, persistence, or malicious intent was found.
External report
View on VirusTotal