ddgs-search

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a normal web and arXiv search skill, but it installs an external Python package and sends search queries to third-party search services.

Before installing, be aware that setup installs the external ddgs Python package and that any query your agent sends may be visible to the selected search provider. The artifacts otherwise look coherent and purpose-aligned.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing the skill depends on the current external ddgs package available to pip, not only the reviewed files.

Why it was flagged

The installer fetches the latest ddgs package without a version pin or lockfile. This is purpose-aligned for a ddgs-based search skill, but it means installed behavior can change with upstream package releases.

Skill content
pip_install(["ddgs"])
Recommendation

Install only if you are comfortable with the ddgs dependency; maintainers should consider pinning a tested ddgs version.

What this means

Sensitive words or private details included in search queries may be sent to third-party search services.

Why it was flagged

The skill is explicitly designed to send search queries to external search providers. This is expected for the purpose, but users should understand that query text leaves the local agent environment.

Skill content
8 search engines in one — Google, Bing, DuckDuckGo, Brave, Yandex, Yahoo, Wikipedia, and Mojeek
Recommendation

Avoid putting secrets, private personal data, or confidential business details into searches unless you are comfortable sharing them with the selected provider.