ddgs-search
v1.2.0Free multi-engine web search via ddgs CLI (DuckDuckGo, Google, Bing, Brave, Yandex, Yahoo, Wikipedia) + arXiv API search. No API keys required. Use when user...
⭐ 2· 1.1k·9 current·9 all-time
by@camopel
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (ddgs-based multi-engine web search + arXiv) matches the code and SKILL.md: scripts call the ddgs CLI and arXiv API, and the installer installs the ddgs Python package. Required binary (python3) is appropriate; no unrelated credentials or services are requested.
Instruction Scope
Runtime instructions limit themselves to installing ddgs, invoking the ddgs CLI via subprocess, and calling the public arXiv API. The search wrapper filters environment variables passed to subprocesses to a small safe set. The SKILL.md does not instruct reading unrelated files or exfiltrating secrets.
Install Mechanism
There is no platform install spec in registry, but the included install.py runs pip to install the ddgs package (first --user, fallback to global). pip installs are normal but can modify the user's Python environment; recommend using a virtualenv if you wish to avoid global/user-wide package changes. The installer copies a wrapper into ~/.local/bin if present — the wrapper file is not included in the package, and the script handles that case gracefully.
Credentials
The skill requires no environment variables or credentials. Scripts access PATH/APPDATA/HOME to detect ddgs installation and to advise PATH changes; search.py intentionally restricts the env passed to ddgs to ('PATH','HOME','LANG','TERM'). No secret-like env vars are requested or read.
Persistence & Privilege
The skill does not request always:true or autonomous elevation. Installation will write to the user's Python package area and may copy a wrapper to ~/.local/bin (user-level persistence). These are normal for CLI tools but worth noting — the installer does not alter other skills or global agent configuration.
Assessment
This skill appears to be what it claims: a ddgs CLI wrapper + arXiv search. Before installing: (1) consider running the install.py inside a Python virtualenv to avoid modifying your global/user Python packages; (2) verify the ddgs package on PyPI yourself if you have strong supply-chain concerns; (3) the installer may suggest adding ~/.local/bin to PATH or copy a wrapper there — that's normal but review any files it writes; (4) avoid running install scripts as root. If you need stricter isolation, run only the arXiv script (which makes plain HTTPS calls) or inspect/execute the search wrapper locally after review.Like a lobster shell, security has layers — review code before you run it.
latestvk9713vqwdn7r62abyczzx1fmax823srv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3