AI Search by Desearch
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears to be a straightforward Desearch search client that sends user queries to Desearch using a user-provided API key.
This skill looks safe for normal search use. Before installing, make sure you are comfortable providing a Desearch API key and sending your search queries to Desearch; avoid including passwords, tokens, private documents, or confidential information in queries.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone using the skill must provide a Desearch API key, and usage may consume quota or paid balance on that account.
The skill requires a Desearch API key, which is expected for accessing the Desearch service but is still a credential users should protect.
Set environment variable: `export DESEARCH_API_KEY='your-key-here'`
Use a dedicated Desearch API key if possible, keep it out of shared logs or prompts, and revoke or rotate it if exposed.
Search queries entered through the skill are sent to Desearch, so sensitive or confidential text in queries may be processed by that external service.
The script sends the user's search prompt to Desearch API endpoints. This is core to the stated search purpose, but it means query contents leave the local environment.
DESEARCH_BASE = "https://api.desearch.ai" ... body = {"prompt": args.query, "streaming": False}Avoid putting secrets, private documents, or confidential business information into search queries unless you trust Desearch’s handling of that data.