ClawHub

Multi Engine Search for Agent

v1.0.8

AI Agent search platform with 9 engines, Google 13 sub-types, vertical scene search, and intelligent auto/multi/extract modes. Designed for LLM and AI agent...

⭐ 0· 149·1 current·1 all-time
byMemijashi@goldentrii
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
The name/description (multi-engine search for agents) matches the included code (novada_search.py, SDK, CLI, MCP server, LangChain integration) and the only service credential (NOVADA_API_KEY) is appropriate for a scraper/search API. The declared network target (scraperapi.novada.com) fits the stated purpose.
✓
Instruction Scope
SKILL.md describes running the CLI/SDK/MCP server and enumerates limited filesystem permissions (tool files, samples, tests) and a single network endpoint. The runtime instructions do not ask the agent to read arbitrary home directories or unrelated credentials (they explicitly state they won't scan home directories and only support CLI flag, NOVADA_API_KEY, or local .env).
✓
Install Mechanism
There is no install spec provided by the registry (instruction-only), and project files are included. References to pip (pip install novada-search) and github are normal project metadata. Nothing downloads arbitrary code from unknown URLs during install.
ℹ
Credentials
The runtime requires a single NOVADA_API_KEY which is proportional to a scraper/search API. However there is an inconsistency: the registry summary at the top of the evaluation said 'Required env vars: none' while SKILL.md and _meta.json declare NOVADA_API_KEY as required. Confirm which registry metadata is authoritative before installing.
✓
Persistence & Privilege
The skill does not request always: true or system-wide persistent privileges. It exposes an MCP stdio server and a LangChain tool (normal for this type of integration). It does not modify other skills or request global configs.
Assessment
This package appears to be a coherent multi-engine search client that needs one API key (NOVADA_API_KEY) to call Novada's scraper API. Before installing, verify the API key source (novada.com) and that you trust the provider; confirm the registry metadata mismatch (some registry metadata shows no required env but SKILL.md/_meta.json require NOVADA_API_KEY). Review novada_search.py for any additional outbound hosts or unexpected behavior (especially if you plan to run the MCP server). Consider running the package in an isolated environment or container, and avoid reusing high-privilege credentials (use a limited/billing-restricted key). If you have doubts about the upstream project, check the referenced repository (github.com/NovadaLabs/novada-search) and the provider's documentation before supplying your API key.

Like a lobster shell, security has layers — review code before you run it.

latestvk973y43va980xqpnv7dtj2pgdd83gfwfsearchvk97ajkzeg9m5g6cxsz71ygk73x833jz0

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments