Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Brave Search 极简国内版

v1.0.6

【极简版省token】使用 Brave API 执行网络搜索。针对国内代理环境做优化。

0· 139·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for jhc888007/brave-search-vpn.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Brave Search 极简国内版" (jhc888007/brave-search-vpn) from ClawHub.
Skill page: https://clawhub.ai/jhc888007/brave-search-vpn
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required env vars: HTTP_PROXY_PORT & BRAVE_SEARCH_API_KEY
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install brave-search-vpn

ClawHub CLI

Package manager switcher

npx clawhub@latest install brave-search-vpn
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description, SKILL.md, and scripts/brave_search.py all align: the code calls https://api.search.brave.com and uses BRAVE_SEARCH_API_KEY plus a local HTTP proxy port. The skill does not request unrelated credentials. Minor gap: the package does not declare Python/requests as a runtime dependency, though the script requires them.
!
Instruction Scope
SKILL.md runtime instructions are narrowly scoped to setting BRAVE_SEARCH_API_KEY and HTTP_PROXY_PORT and running the provided Python script (which only communicates with Brave). However README.md recommends modifying global OpenClaw settings (disabling the built-in web_search tool and editing openclaw.json) — that is scope creep because it instructs changing system/global agent behavior beyond this skill's own files.
Install Mechanism
No install spec (instruction-only) and no downloads — lowest install risk. However the bundle includes a Python script that depends on the 'requests' library and python3; those runtime requirements are not declared in metadata or SKILL.md.
Credentials
Declared required env vars are BRAVE_SEARCH_API_KEY and HTTP_PROXY_PORT, both justified by the code (API key for Brave, proxy port for a local proxy/VPN). No additional secrets or unrelated env vars are requested.
Persistence & Privilege
Skill does not request persistent or elevated privileges: always:false and it does not modify other skills or system-wide configs itself. Note: README suggests manual edits to global OpenClaw config (user-driven, not automatic).
What to consider before installing
This skill's code matches its stated purpose and only asks for a Brave API key and a local proxy port — which is reasonable for a proxied Brave Search wrapper. Before installing: (1) verify the source/repository (homepage unknown); (2) be aware the bundle expects python3 and the 'requests' package but does not declare them — run in an environment where you control dependencies; (3) do not paste your API key into public places; (4) the README suggests changing global OpenClaw settings (disabling the built-in web_search) — avoid making system-wide changes unless you understand the impact; (5) if you want stronger assurance, review the script locally and test it in an isolated environment (or a throwaway agent) so you can confirm it only calls api.search.brave.com via your local proxy.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

EnvHTTP_PROXY_PORT & BRAVE_SEARCH_API_KEY
latestvk9731fkpwp51fwgz01dvgb54ss83y8xv
139downloads
0stars
5versions
Updated 4w ago
v1.0.6
MIT-0

Brave Search

使用 Brave API 在互联网上搜索最新信息。本工具会向 https://api.search.brave.com 发起网络请求。

配置环境变量与凭据

此脚本需要 Brave API 密钥和 VPN 环境才能运行。需要配置 BRAVE_SEARCH_API_KEYHTTP_PROXY_PORT

export BRAVE_SEARCH_API_KEY="your_api_key_here"
export HTTP_PROXY_PORT="your_vpn_port_here"

使用方法

python3 scripts/brave_search.py --q "你的搜索词" [--country CN] [--count 20]
参数名类型必填默认值描述
qstring-搜索关键词(最多50个词)
countrystringCN搜索国家代码,如 CN, US, ALL
search_langstringzh-hans语言偏好,如 zh-hans, en
countint20返回结果数量限制(1-20)
offsetint0分页偏移量(0-9)
safesearchstringmoderate内容过滤:off, moderate, strict
freshnessstring-时间过滤:pd(1天内), pw(1周内), pm(1个月内), py(1年内) , YYYY-MM-DDtoYYYY-MM-DD(一定范围)
text_decorationsbooltrue是否在结果中保留高亮标记
spellcheckbooltrue是否自动纠正拼写
result_filterstring-过滤结果类型,如 web,news,videos
gogglesstring-自定义排序规则(URL 或 内联规则)
extra_snippetsbool/stringfalse是否获取每个结果的额外文本摘要(最多5个)

License

MIT License - Feel free to use and modify.

Comments

Loading comments...