Duckduckgo Search 1.0.0
v1.0.0Performs web searches using DuckDuckGo to retrieve real-time information from the internet. Use when the user needs to search for current events, documentati...
⭐ 0· 828·10 current·12 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (DuckDuckGo web search) matches the instructions: examples use the duckduckgo-search Python library (DDGS) for text, news, image, video, maps, and suggestions. There are no unrelated env vars, binaries, or config paths required.
Instruction Scope
The SKILL.md instructs the agent to pip/uv install the duckduckgo-search package and run python -c snippets that perform searches and optionally save results. The instructions do not ask to read arbitrary host files, environment secrets, or contact endpoints unrelated to DuckDuckGo. Minor note: some example snippets (truncated in the provided file) appear to save outputs to disk — saving search results to local files is reasonable for this skill but should be done with usual caution.
Install Mechanism
There is no formal install spec; the README suggests using `pip install duckduckgo-search` (or `uv pip install`). Installing a third-party PyPI package at runtime is a common pattern but is a moderate-risk action because it downloads and executes code from PyPI. The use of the nonstandard 'uv' command in examples is odd (may be an internal wrapper) but not inherently malicious.
Credentials
The skill declares no required environment variables, credentials, or config paths and the instructions do not reference hidden credentials. Nothing requests sensitive tokens or unrelated service keys.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent presence or modify other skills or system-wide settings. Autonomous invocation remains allowed by default on the platform, which is normal and not elevated by this skill.
Assessment
This skill appears coherent and limited to performing DuckDuckGo searches by installing and using the duckduckgo-search Python package. Before installing or running it: (1) consider installing the package in a virtualenv or sandbox rather than globally, since pip install executes third-party code from PyPI; (2) verify the duckduckgo-search package name and maintainers on PyPI if you want to ensure you get the expected project; (3) the SKILL.md mentions a nonstandard 'uv' installer wrapper — if you don't have it, use plain pip; (4) note a minor metadata mismatch (ownerId differs between registry metadata and _meta.json) — this looks like a bookkeeping inconsistency rather than a functional issue, but you may want to confirm the skill source before trusting automatic installs; and (5) if you are concerned about network or code execution risk, run the examples in an isolated environment.Like a lobster shell, security has layers — review code before you run it.
latestvk97078z441vfvz9zyrvf0q1b4s81cw61
License
MIT-0
Free to use, modify, and redistribute. No attribution required.