Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Duckse

v0.1.0

This skill should be used when users need to search the web for information, find current content, look up news articles, search for images, or find videos. It uses duckse (DDGS-based CLI) to return clean results in pretty text or JSON.

0· 1.2k·2 current·2 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dwirx/duckse.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Duckse" (dwirx/duckse) from ClawHub.
Skill page: https://clawhub.ai/dwirx/duckse
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install duckse

ClawHub CLI

Package manager switcher

npx clawhub@latest install duckse
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
Purpose & Capability
Name/description match the instructions: SKILL.md documents using the duckse (DDGS-based) CLI to perform web, news, image, and video searches. The skill declares no credentials or special privileges and the listed command options are consistent with a search CLI.
Instruction Scope
Instructions are narrowly scoped to running duckse commands and troubleshooting PATH. They do not request reading unrelated files or environment secrets. However, the SKILL.md includes an explicit installer command (curl https://raw.githubusercontent.com/.../install.sh | bash) and a development fallback invoking local code (uv run python main.py), which broaden the operational surface the agent might execute.
!
Install Mechanism
There is no formal install spec in the registry, but the SKILL.md tells the agent/user to run a remote install script piped to bash from raw.githubusercontent.com. Download-and-execute of a remote script is a higher-risk install pattern (arbitrary code execution). While GitHub raw URLs are a common host, executing an external script without verification is risky and disproportionate to a simple search helper.
Credentials
The skill requests no environment variables, no credentials, and no config paths. Troubleshooting mentions adjusting PATH and optional proxy/timeout flags in duckse, which are proportional to a CLI search tool.
Persistence & Privilege
The skill does not request always:true or any permanent elevated presence. It's instruction-only and user-invocable; there is no indication it modifies other skills or system-wide agent configurations.
What to consider before installing
This skill appears to be a simple wrapper around the duckse CLI and is otherwise coherent, but the SKILL.md recommends installing by piping a remote script into bash (curl | bash). Running such scripts executes code from a remote source and can be dangerous. Before installing or invoking the installer: (1) inspect the install.sh contents directly in your browser or git clone the repository and read the script; (2) prefer installing from a distribution package or a vetted release if available; (3) run the installer in a sandboxed environment (container/VM) if you must test it; (4) verify the upstream GitHub repo and maintainer reputation (dwirx/duckse) and check recent commits/issues; (5) be cautious about running the development fallback (uv run python main.py) unless you control the source tree. If you cannot or will not verify the installer, do not run the curl | bash command.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cvpts9wjmdwwab8dk1e13t180sk4b
1.2kdownloads
0stars
1versions
Updated 22h ago
v0.1.0
MIT-0

Web Search (duckse)

Overview

Gunakan duckse untuk metasearch web berbasis DDGS. Skill ini mendukung:

  • text, news, images, videos, books
  • filter waktu, region, safe search, backend
  • output rapi (default) atau JSON (--json)
  • URL final via redirect (--expand-url)

When to Use This Skill

Gunakan skill ini saat user meminta:

  • pencarian web umum
  • berita terbaru/topik tertentu
  • pencarian gambar/video
  • riset cepat dengan sumber URL
  • fact-checking berbasis hasil web

Prerequisites

Pastikan duckse tersedia:

duckse --help

Jika belum ada, install:

curl -sSL https://raw.githubusercontent.com/dwirx/duckse/main/scripts/install.sh | bash

Core Commands

1. Basic Web Search

duckse "<query>"

Contoh:

duckse "python asyncio tutorial"

2. Limit Results

duckse "<query>" --max-results <N>

Contoh:

duckse "machine learning frameworks" --max-results 20

3. Time Filter

duckse "<query>" --timelimit <d|w|m|y>

Contoh:

duckse "artificial intelligence news" --type news --timelimit w

4. News Search

duckse "<query>" --type news

Contoh:

duckse "climate change" --type news --timelimit w --max-results 15

5. Image Search

duckse "<query>" --type images

Contoh:

duckse "sunset over mountains" --type images --max-results 20

Filter image:

duckse "landscape photos" --type images --size Large
duckse "abstract art" --type images --color Blue
duckse "icons" --type images --type-image transparent
duckse "wallpapers" --type images --layout Wide

6. Video Search

duckse "<query>" --type videos

Contoh:

duckse "python tutorial" --type videos --max-results 15

Filter video:

duckse "cooking recipes" --type videos --duration short
duckse "documentary" --type videos --resolution high

7. Books Search

duckse "<query>" --type books --backend annasarchive

Contoh:

duckse "sea wolf jack london" --type books --max-results 10

8. Region and SafeSearch

duckse "<query>" --region us-en --safesearch moderate

Contoh:

duckse "local news" --type news --region us-en --safesearch on

9. JSON and Final URL

JSON output:

duckse "quantum computing" --json

Resolve final URL:

duckse "beritakan di indonesia hari ini" --expand-url --max-results 5

Valid Backends by Type

  • text: bing, brave, duckduckgo, google, grokipedia, mojeek, yandex, yahoo, wikipedia, auto
  • images: duckduckgo, auto
  • videos: duckduckgo, auto
  • news: bing, duckduckgo, yahoo, auto
  • books: annasarchive, auto

Common Usage Patterns

Research Topic

duckse "machine learning basics" --max-results 15
duckse "machine learning" --type news --timelimit m --max-results 15
duckse "machine learning tutorial" --type videos --max-results 10

Current Events Monitoring

duckse "climate summit" --type news --timelimit d --max-results 20

Fact-Checking

duckse "specific claim to verify" --type news --timelimit w --max-results 20 --expand-url

Quick Reference

Command format:

duckse "<query>" [options]

Essential options:

  • --type (text|images|videos|news|books)
  • --max-results
  • --timelimit (d|w|m|y)
  • --region
  • --safesearch (on|moderate|off)
  • --backend
  • --json
  • --expand-url
  • --proxy, --timeout, --verify

Best Practices

  1. Gunakan query spesifik
  2. Pakai --timelimit untuk informasi terbaru
  3. Pakai --expand-url jika butuh URL final
  4. Gunakan --json untuk otomasi/pipeline
  5. Sesuaikan --max-results (mulai 10-20)

Troubleshooting

  • duckse: command not found
    • tambahkan PATH: export PATH="$HOME/.local/bin:$PATH"
  • backend tidak valid
    • sesuaikan dengan daftar backend per type
  • hasil kosong
    • longgarkan query atau hapus filter waktu
  • timeout/network
    • ulangi, tambah --timeout, atau gunakan --proxy

Development Fallback

Jika sedang develop lokal tanpa binary terpasang global:

uv run python main.py "<query>" [opsi yang sama]

Comments

Loading comments...