Duckduckgo Search Backup
v1.0.0Performs web searches using DuckDuckGo to retrieve real-time information from the internet. Use when the user needs to search for current events, documentati...
⭐ 0· 197·1 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the SKILL.md examples: the skill instructs the agent to install and use the public duckduckgo-search Python package and run queries with DDGS. Requested tools (python, pip) are appropriate for this purpose.
Instruction Scope
Runtime instructions show only installing the duckduckgo-search package and running Python snippets to perform text/news/image/video/maps/suggestion searches and to save results. There are no instructions to read unrelated files, exfiltrate arbitrary data, or access system credentials. One example appears to save results to disk (truncated), which is reasonable for a search/backup skill.
Install Mechanism
This is an instruction-only skill with no install spec, which is low-risk. The SKILL.md recommends 'pip install duckduckgo-search' (a public PyPI package). Installing third-party pip packages executes code from the package source (moderate risk by nature) but is proportionate to the skill's functionality.
Credentials
No environment variables, credentials, or config paths are requested. The skill does not ask for unrelated secrets and its examples do not reference hidden tokens or external services beyond DuckDuckGo.
Persistence & Privilege
The skill is not always-enabled and uses the platform default for autonomous invocation. It does not request elevated or persistent system-wide privileges.
Assessment
This skill is instruction-only and appears to do what it says: install the duckduckgo-search Python package and run searches. Before installing the pip package, you should: 1) verify the package name and author on PyPI and inspect the package source if possible; 2) install it in a virtual environment or sandbox (avoid system Python) because pip packages run code during install; 3) be aware that search results examples may write files to disk—ensure you trust the destination directory; and 4) if you must run in a sensitive environment, consider running searches via an isolated container or a well-audited proxy implementation instead of arbitrary pip installs.Like a lobster shell, security has layers — review code before you run it.
latestvk9737pn72xtpxq0k5y2n6xrxh982t9zx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.