Mxy Web Search
PassAudited by ClawScan on May 1, 2026.
Overview
This is a benign instruction-only web-search helper, but users should know it sends queries to DuckDuckGo and has a minor package metadata inconsistency to verify.
This skill appears safe for ordinary web-search fallback use. Before installing, be comfortable with search queries being sent to DuckDuckGo Lite and fetched result pages being retrieved from external sites, and verify the publisher/package identity because the bundled metadata does not exactly match the registry metadata.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Search terms and selected result-page fetches may be visible to DuckDuckGo and the destination websites.
The skill relies on web_fetch to send search queries to DuckDuckGo Lite and later fetch selected result pages. This is expected for the stated purpose, but it is still external network tool use.
web_fetch(url="https://lite.duckduckgo.com/lite/?q=QUERY", extractMode="text", maxChars=8000)
Avoid including sensitive personal or confidential information in search queries, and treat fetched web content as untrusted research material.
The mismatch could make it harder to confirm that the registry entry and packaged artifact came from the same publisher state.
The embedded metadata owner and publish timestamp differ from the registry metadata shown in the artifact set. There is no executable code here, so this is a provenance/package-identity note rather than a behavior concern.
"ownerId": "kn74ca7cqvsfmq67r6x9m1nc45816qe9", "slug": "mxy-web-search", "version": "1.0.0", "publishedAt": 1771148054829
Verify that the publisher identity is the one you intended to install from, and prefer updated metadata that matches the registry record.