DuckDuckGo Web Search
v1.0.0Search the web using DuckDuckGo. Free, no API key required. Use when the user asks to search the web, look something up, find information online, research a topic, or when you need to find current information that isn't in your training data. Also use when web_search tool is unavailable or has no API key configured.
⭐ 7· 3.5k·24 current·25 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description state DuckDuckGo searches; included script (scripts/search.py) calls ddgs.DDGS().text() and prints titles/URLs/snippets. No unexpected binaries, credentials, or unrelated capabilities are requested.
Instruction Scope
SKILL.md instructs running the bundled script and mentions the ddgs dependency. The runtime instructions and script only accept a query and optional count and output search results; they do not read files, environment variables, or send data to third-party endpoints beyond DuckDuckGo via the ddgs library.
Install Mechanism
There is no registry install spec (instruction-only), and the dependency is the PyPI package 'ddgs'. That is a typical, traceable third-party dependency; the SKILL.md suggests 'pip install --break-system-packages ddgs' which is unusual for some environments but not malicious. No arbitrary downloads or extract steps are present.
Credentials
The skill requires no environment variables, credentials, or config paths. The declared requirements align with the simple network-bound search functionality.
Persistence & Privilege
The skill does not request always: true, does not modify other skills or system settings, and will only run when invoked (user-invocable / autonomous invocation defaults are normal).
Assessment
This skill appears to do exactly what it says: run DuckDuckGo searches using the ddgs Python package and print results. Before installing, consider: (1) ddgs is an unofficial scraper — it may break if DuckDuckGo changes their site and may be subject to rate limits; (2) the SKILL.md recommends 'pip install --break-system-packages', which can be disruptive in some environments—prefer installing packages into a virtualenv or sandbox; (3) verify the ddgs package name/version on PyPI to avoid typosquatting; and (4) run untrusted packages in an isolated environment if you have security concerns.Like a lobster shell, security has layers — review code before you run it.
latestvk975xd1j48pq4thqfw55hafszn80rtgv
License
MIT-0
Free to use, modify, and redistribute. No attribution required.