Back to skill
Skillv0.1.1
VirusTotal security
Advanced Searxng Search Skill · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
ReviewMay 1, 2026, 4:43 AM
- Hash
- 91b181b6a43b6c581c23e965fa967df312957dc215e1890dcd45e2c05734f155
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: searxng-search-skill Version: 0.1.1 The skill is designed to interact with a SearXNG metasearch instance, which involves making HTTP requests to a configurable `instance_url` (searxng_skill/core.py). It also includes functionality to export search results to local files at a user-specified `filepath` (searxng_skill/utils.py). While these capabilities align with the stated purpose of a search skill, they introduce a vulnerability risk if the `instance_url` or `filepath` parameters are controlled by an attacker (e.g., via prompt injection against the agent using this skill) to target malicious endpoints or write to sensitive file system locations. There is no evidence of intentional malicious behavior within the skill's code or instructions, but the broad capabilities could be exploited.
- External report
- View on VirusTotal