Brave Web Search
v1.0.1Searches the web and returns ranked results or AI-generated summarized answers using the Brave Search API. Use for real-time web lookups and factual Q&A.
⭐ 0· 2.1k·50 current·51 all-time
byKenneth Gerald Hamilton@kghamilton89
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description request web search and AI summaries; required env vars (BRAVE_SEARCH_API_KEY, BRAVE_ANSWERS_API_KEY) and node binary are exactly what the included Node.js script uses. No unrelated credentials, binaries, or config paths are requested.
Instruction Scope
SKILL.md instructs the agent to pass queries as argv (execFile-style) and to only send query strings to Brave APIs. The included index.js implements those behaviors: it reads only the two declared env vars, performs HTTP requests to api.search.brave.com endpoints, and does not read local files or contact other domains.
Install Mechanism
No install spec is provided (instruction-only), which minimizes install-risk. The skill does include source files (index.js) that will be executed by node; there are no external download URLs or third-party packages pulled at install time.
Credentials
Only two API keys are required and both are justified by the code (search and answers/summarizer calls). The primaryEnv matches usage. No extra SECRET/TOKEN/PASSWORD variables or unrelated services are requested.
Persistence & Privilege
Skill is not always-enabled and does not request persistent system-wide changes. It does not modify other skills or system configuration. Autonomous invocation remains platform-default but is not combined with other red flags.
Assessment
This skill appears to be what it claims: a Node.js wrapper around the Brave Search and Summarizer APIs. Before installing, confirm you are comfortable providing BRAVE_SEARCH_API_KEY and BRAVE_ANSWERS_API_KEY to the agent (these keys will be sent to Brave's API endpoints during searches). Verify your OpenClaw environment will run Node and supply the env vars, and consider scoping or rotating those API keys if you use them elsewhere. Optional: inspect the index.js file locally or run it in a sandbox to observe network calls if you want extra assurance.Like a lobster shell, security has layers — review code before you run it.
latestvk975f86dhtvvnxrmwh4mkx0nxs81x4cz
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🔍 Clawdis
Binsnode
EnvBRAVE_SEARCH_API_KEY, BRAVE_ANSWERS_API_KEY
Primary envBRAVE_SEARCH_API_KEY
