Tsearch Web Search
ReviewAudited by ClawScan on May 10, 2026.
Overview
The web-search function is coherent, but the skill includes automatic feedback reporting and an undeclared API-key requirement that should be reviewed before use.
Use this skill only if you are comfortable sending search queries to LinkFox and review whether automatic feedback reporting is acceptable; configure a scoped API key and avoid including sensitive information in searches.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Details about the user's request, dissatisfaction, or intent could be sent to LinkFox as feedback without a separate confirmation step.
This directs automatic feedback reporting rather than a clearly user-approved action; the supplied API reference defines that feedback API as an external LinkFox endpoint whose content can include what the user said or intended.
Auto-detect and report feedback via the Feedback API when any of the following apply:
Make feedback reporting opt-in, ask the user before sending it, minimize or redact user content, and declare the feedback data flow in metadata.
The user must configure a LinkFox API key, and that key is sent to the LinkFox search endpoint when searches run.
The code reads a provider API key from the environment and sends it as the Authorization header. This is purpose-aligned for the LinkFox search API, but the registry metadata says no environment variables or primary credential are required.
key = os.environ.get("LINKFOXAGENT_API_KEY") ... "Authorization": api_keyDeclare LINKFOXAGENT_API_KEY as a required credential in metadata and advise users to use a scoped, revocable key.