360 Search
PassAudited by ClawScan on May 1, 2026.
Overview
It appears to be a normal 360 Search tool, but it uses an automated browser and sends search terms to 360 Search, while its packaging documentation is incomplete.
This looks reasonable for a search skill, but use it with the expectation that queries go to 360 Search through an automated browser. Do not search for secrets or sensitive private data, and install any Playwright/browser dependencies only from trusted sources.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Search terms may be visible to 360 Search, and search results/snippets should be treated as untrusted web content.
The skill builds a search URL from the user's query and navigates a browser to it. This is purpose-aligned for search, but it means user queries are sent to the external 360 Search service.
url = f"{self.base_url}/s?q={query}"
self.page.goto(url, timeout=self.timeout)Avoid putting secrets or highly sensitive personal data in queries, and verify important results before relying on them.
Installation or execution may require undeclared dependencies or browser components, so users may need to choose and trust their own dependency source.
The code depends on Playwright/Chromium, but the metadata and install section declare no required binaries, environment variables, or install spec. This is a packaging/provenance gap rather than evidence of malicious behavior.
from playwright.sync_api import sync_playwright, Page, Browser
Install dependencies only from trusted package sources; the publisher should add a requirements/lock file and accurate install instructions.
A user may expect lightweight API calls, while the skill actually launches an automated browser and depends on web-page structure.
The included implementation uses browser automation against www.so.com rather than a documented API. The functionality is still search-related, but the description may understate how the skill works.
Description: Provides search functionalities including image and news retrieval using the 360 Search API.
Treat this as a browser-based search/scraping skill unless the publisher updates the description and documentation.