Ddg

PassAudited by ClawScan on May 1, 2026.

Overview

This instruction-only skill is coherent for terminal DuckDuckGo searches, with normal cautions about installing ddgr and sending searches to external services.

This skill appears safe for its stated purpose. Before using it, install ddgr only from a source you trust, and remember that terminal searches still send your query text to DuckDuckGo or bang-target sites.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Installing ddgr through these methods can modify the local system with elevated privileges.

Why it was flagged

The skill recommends user-directed installation of an external command-line tool, including sudo and source-based install paths. This fits the purpose, but the user should trust the package source before installing.

Skill content
sudo snap install ddgr ... sudo add-apt-repository ppa:twodopeshaggy/jarun ... git clone https://github.com/jarun/ddgr.git ... sudo make install
Recommendation

Prefer a trusted package manager, verify the project/source, and avoid source installation unless you are comfortable reviewing or trusting that code.

What this means

Private or sensitive search terms could be disclosed to external search providers or destination sites.

Why it was flagged

The skill is explicitly for web search, so search terms leave the local machine for DuckDuckGo and may involve other third-party sites when bangs are used.

Skill content
Use ddgr (DuckDuckGo from the terminal) to perform privacy-focused web searches ... Use DuckDuckGo bangs to search specific sites: ... !yt ... !gh ... !a
Recommendation

Do not include secrets, private credentials, or highly sensitive personal information in search queries; use additional privacy controls such as Tor/proxy only if appropriate.