web-search

使用无头浏览器通过多个搜索引擎搜索内容。用于当用户需要搜索最新新闻、时事、股票信息或其他需要实时网络数据的内容时。支持百度、Bing、360、Sogou、微信、今日头条、谷歌等国内外搜索引擎。

Security Scan

The skill's code and instructions match its stated purpose (headless-browser multi-engine search); primary concerns are use of anti-crawling evasion (stealth plugin), supply-chain/npm installation surface, and the SKILL.md's hardcoded local path — none are direct evidence of malicious intent but they warrant caution.

Purpose & Capability

Name/description (headless browser multi-engine search) align with the included files: search.js and multi-search.js implement Playwright-based scraping of many search engines and news sites. Required binaries/env vars are none, which is consistent because the code depends on npm packages instead.

Instruction Scope

SKILL.md and the scripts instruct the agent/user to launch headless browsers, visit many public search/news URLs, extract titles/links, and output results. The instructions do not ask to read unrelated local files or environment variables. Two points to note: SKILL.md contains a hardcoded user-local path (cd /Users/wuwei/...), which is odd but not harmful, and the runtime code intentionally tries to evade anti-bot detection (stealth plugin + user-agent spoofing), which is scope creep away from a benign 'query an API' approach and could violate target sites' terms of service.

Install Mechanism

There is no automatic install spec in the registry entry — the README asks the user to run npm install and npx playwright install. The repository includes package.json and package-lock.json referencing common npm packages (playwright, playwright-extra, puppeteer-extra-plugin-stealth). This is a normal but higher-risk pattern than an instruction-only skill because it requires pulling many third-party packages and browser binaries (supply-chain risk). No downloads from arbitrary personal servers are present.

Credentials

The skill declares no required environment variables, credentials, or config paths and the code does not read any secrets or unrelated env vars. The lack of requested credentials is proportionate to its purpose.

Persistence & Privilege

always:false and user-invocable:true (default) — the skill does not request persistent/global privileges or modify other skills. It does not attempt to enable itself autonomously beyond the platform default.

Assessment

This skill appears to do what it claims (headless-browser scraping across many search engines). Before installing or running it, consider: - Stealth/anti-crawl: The code uses a stealth plugin and user-agent spoofing to evade anti-bot measures. That is plausible for crawling but may violate search engines' terms of service and could get your IP blocked. Only use in environments where you accept that risk. - Package/supply-chain risk: You must run npm install and npx playwright install which will download many packages and browser binaries. Review package-lock.json and run in an isolated environment (container/VM) if you are concerned about supply-chain or untrusted code. - Local path in SKILL.md: The README uses a hardcoded local path (/Users/wuwei/...), update to your own path before running to avoid confusion. - Privacy/network: The scripts visit external sites and output results to console — they do not appear to exfiltrate data to hidden endpoints, but if you paste sensitive queries into the tool those search terms will be sent to third-party search engines. Recommended actions: inspect the package-lock.json, run npm install only in an isolated environment, consider using official search APIs (Bing/Google) if you need stable/legal access, and be mindful of legal/ToS implications for scraping/anti-crawl evasion.

Web Search Skill

使用无头浏览器（Playwright/Puppeteer）通过多个搜索引擎搜索内容。

搜索引擎列表

国内搜索引擎

• Baidu: https://www.baidu.com/s?wd={keyword}
• Bing CN: https://cn.bing.com/search?q={keyword}&ensearch=0
• 360: https://www.so.com/s?q={keyword}
• Sogou: https://sogou.com/web?query={keyword}
• WeChat: https://wx.sogou.com/weixin?type=2&query={keyword}
• Toutiao: https://so.toutiao.com/search?keyword={keyword}
• Jisilu: https://www.jisilu.cn/explore/?keyword={keyword} (基金/理财)

国际搜索引擎

• Google: https://www.google.com/search?q={keyword}
• Google HK: https://www.google.com.hk/search?q={keyword}
• DuckDuckGo: https://duckduckgo.com/html/?q={keyword}
• Yahoo: https://search.yahoo.com/search?p={keyword}
• Startpage: https://www.startpage.com/sp/search?query={keyword}
• Brave: https://search.brave.com/search?q={keyword}
• Ecosia: https://www.ecosia.org/search?q={keyword}
• Qwant: https://www.qwant.com/?q={keyword}
• WolframAlpha: https://www.wolframalpha.com/input?i={keyword}

使用方法

运行搜索脚本：

cd /Users/wuwei/.openclaw/workspace/skills/web-search/scripts
node search.js <engine> <keyword>

参数说明

• engine: 搜索引擎名称（baidu, bing-cn, bing-int, 360, sogou, weixin, toutiao, jisilu, google, google-hk, duckduckgo, yahoo, startpage, brave, ecosia, qwant, wolframalpha）
• keyword: 搜索关键词（URL编码）

示例

# 搜索百度
node search.js baidu "A股今日走势"

# 搜索DuckDuckGo
node search.js duckduckgo "stock market news"

输出

脚本会打开无头浏览器，访问搜索页面，提取搜索结果标题和链接，并输出为markdown格式。

依赖

需要安装 Playwright：

npm install playwright
npx playwright install chromium

---

🆕 多搜索引擎对照搜索 (Multi-Search)

使用 multi-search.js 脚本可以同时搜索 Google 和 Bing，进行对照验证：

• ✅ 同时获取 Google 和 Bing 的搜索结果
• ✅ 智能去重合并，标记数据来源
• ✅ 如果 Google 访问失败，自动使用夸克AI搜索替代
• ✅ 支持 JSON 和 Markdown 两种输出格式

使用方法

cd /Users/wuwei/.openclaw/workspace/skills/web-search/scripts
node multi-search.js <keyword> [options]

参数说明

参数	说明
keyword	搜索关键词（必填）
--google-only	仅使用 Google 搜索
--bing-only	仅使用 Bing 搜索
--quark-only	仅使用夸克AI搜索
--max-results=N	最多返回 N 条结果（默认 20）
--format=md|json	输出格式（默认 md）

示例

# 基本用法 - 同时搜索 Google + Bing
node multi-search.js "A股今日热点"

# 输出为 JSON 格式
node multi-search.js "人工智能新闻" --format=json

# 获取更多结果
node multi-search.js "新能源汽车政策" --max-results=30

# 仅使用 Bing
node multi-search.js "美股行情" --bing-only

# 仅使用夸克AI（适合国内搜索）
node multi-search.js "国内财经新闻" --quark-only

输出示例（Markdown 格式）

============================================================
🔍 "A股今日热点" 搜索结果（共 15 条）
============================================================

1. A股三大指数集体上涨，科技股领涨
   🔗 https://finance.sina.com.cn/...
   📌 来源: Google + Bing

2. 新能源汽车板块异动，多只个股涨停
   🔗 https://stock.eastmoney.com/...
   📌 来源: Bing

3. 北向资金净流入超50亿元
   🔗 https://finance.qq.com/...
   📌 来源: Google
   
...

错误处理机制

1. Google 访问失败：自动切换到夸克AI搜索
2. 所有引擎失败：返回空结果并输出错误信息
3. 部分引擎失败：返回成功引擎的结果，并标记失败的引擎

特性对比

特性	Google	Bing	夸克AI
国内访问	⚠️ 不稳定	✅ 稳定	✅ 稳定
中文搜索	✅ 好	✅ 好	✅ 优秀
实时新闻	✅ 快	✅ 快	✅ 快
英文搜索	✅ 优秀	✅ 好	⚠️ 一般

推荐使用场景

• 默认模式（Google + Bing）：获取最全面的结果
• 仅 Bing：国内访问稳定，中文搜索优秀
• 仅 夸克AI：国内搜索首选，中文理解好