DuckDuckGo Web Search

Security checks across malware telemetry and agentic risk

Overview

This is a simple instruction-only web search helper that uses DuckDuckGo Lite through web_fetch and shows no evidence of hidden code, credential use, persistence, or destructive behavior.

This skill appears safe for ordinary web search use. Before installing, be aware that any query you ask it to search will be sent to DuckDuckGo Lite, and selected results may be fetched from third-party websites.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Info
What this means

Your search queries may be sent to DuckDuckGo Lite, and if the agent fetches result pages, those sites may also receive requests.

Why it was flagged

The skill instructs the agent to use the built-in web_fetch tool to query DuckDuckGo Lite. This is purpose-aligned for a web search helper, but it does involve sending the user's search terms to an external service.

Skill content
web_fetch(url="https://lite.duckduckgo.com/lite/?q=QUERY", extractMode="text", maxChars=8000)
Recommendation

Use it for normal web research, but avoid placing private secrets or highly sensitive personal data directly in search queries.